Exploit for Type Confusion in Apple Ipados

Coruna Exploit Kit - Deobfuscated CVE-2024-23222 HEAVILY B...

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

CVE-2024-38063 Exploit Advanced exploitation tool with precis...

Exploit for CVE-2016-10555

██╗██╗ ██╗████████╗ ███████╗ ██████╗ ██████╗ ███...

Exploit for OS Command Injection in Fortinet Fortiweb

No d...

Exploit for Improper Input Validation in Linux Linux_Kernel

CVE-2021-3490 Credits to https://github.com/chompie1337 S...

Exploit for Improper Access Control in Vitejs Vite

No d...

Exploit for Integer Overflow or Wraparound in Linux Linux_Kernel

No d...

Exploit for SQL Injection in Dbgpt Db-Gpt

DBGPT Unauthenticated Information Disclosure & SQL Execution P...

ScannerDravec

No d...

Exploit for Code Injection in Anthropic Claude_Code

CVE-2025-59536 - the startup trust dialog implementation. Clau...

Exploit for Use After Free in Linux Linux_Kernel

cve-2024-1086-lpe Technical analysis and proof-of-concept for...

metasploit-mcp

metasploit-mcp Metasploit Framework MCP server for exploit ex...

Exploit for CVE-2026-21385

Qualcomm Vulnerability Scanner The Qualcomm Vulnerability Scan...

Exploit for CVE-2026-21385

Qualcomm Vulnerability Scanner The Qualcomm Vulnerability Scan...

Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-...

📄 WordPress AI Engine 3.1.3 Mass Enumeration

This advisory documents a fully automated PHP-based exploitation framework designed to perform mass enumeration, plugin detection, token extraction, and automated account creation targeting vulnerable WordPress MCP-related REST API endpoints...

📄 WordPress AI Bud 1.8.5 Shell Upload

WordPress AI Bud plugin version 1.8.5 suffers from an unauthenticated shell upload vulnerability. The vulnerability exists in the actualizadorgit.php file which provides unauthenticated access to download and execute files from arbitrary GitHub repositories without proper security controls...

📄 WordPress AI Engine 3.0.0 Shell Upload

This Metasploit module exploits an unauthenticated file upload vulnerability in the WordPress AI Engine plugin versions prior to 3.0.0. The plugin's REST API endpoint /wp-json/mwai-ui/v1/files/upload fails to properly validate authentication, allowing attackers to upload arbitrary files including...

📄 WordPress AI Engine 3.1.3 Add Admin / Shell Upload

The AI Engine WordPress plugin version 3.1.3 exposes an MCP JSON RPC endpoint allowing unauthenticated calls to administrative functions. An attacker can remotely create an administrator account then upload a malicious plugin or payload to obtain full remote code execution on the WordPress Server...

📄 WordPress Cibeles AI 1.10.8 Shell Upload

An unauthenticated arbitrary file upload vulnerability exists in the Cibeles AI plugin for WordPress versions 1.10.8 and earlier. The vulnerability allows unauthenticated attackers to upload arbitrary files, including PHP webshells, by exploiting the GitHub integration functionality, leading to...