278609 matches found
Exploit for CVE-2026-49777
CVE-2026-49777 CVE-2026-49777 - ShapedPlugin Product Slider Pr...
JoomlaSniper
JoomlaSniper CVE-2026-48907 — Joomla JCE Editor Unauthen...
Exploit for CVE-2026-8809
CVE-2026-8809 Advanced Custom Fields: Extended = 0.9.2.5 -...
security-advisories
Security Advisories This repository contains public security...
linux-privesc-linpeas
🐧 linux-privesc-linpeas End-to-end Linux privilege escalati...
ethical-hacking-security-labs
Ethical Hacking & Network Security Lab Portfolio A hands-on...
Exploit for CVE-2026-46645
CVE-2026-46645 - SQLAdmin ajaxlookup Authorization Bypass...
websec-skills
websec-skills Web Security Vulnerability Testing Skills Set,...
📄 FortiSandbox 4.4.7 Authentication Bypass / Command Injection
This Metasploit auxiliary scanner module is designed to collect system and environment information from vulnerable FortiSandbox instances by leveraging two disclosed vulnerabilities: an authentication bypass and a command injection flaw. The module supports multiple collection modes, including...
📄 Check Point VPN IKE Logic Flaw
This is a Python script attempting to exploit a vulnerability in Check Point VPN by sending a malformed IKESAINIT packet to UDP port 500, detecting whether the target responds as an indicator of exploitability, then executing a MITM attack to intercept IKE packets between a victim and a VPN...
📄 BIRD 2.18 Stack Buffer Overflow / Denial of Service Scanner
This Metasploit auxiliary module is designed to assess a vulnerability in the BGP implementation of the BIRD Internet Routing Daemon. The module establishes a BGP session with a target router, performs standard protocol negotiation, and then sends a specially crafted BGP UPDATE message containing...
📄 WordPress Gravity Forms 2.10.0.1 File Deletion / Path Traversal
This Metasploit module exploits a vulnerability in the Gravity Forms WordPress plugin versions 2.10.0.1 and below where file URLs stored in form entries are not properly validated. An attacker can inject a crafted entry containing path traversal sequences ../ to reference files outside the intend...
📄 Palo Alto GlobalProtect Authentication Bypass
This Metasploit module exploits an authentication bypass vulnerability in Palo Alto Networks PAN-OS GlobalProtect portal and gateway components. The vulnerability stems from CWE-565: Reliance on Cookies without Validation and Integrity Checking. An unauthenticated remote attacker can forge...
📄 Paperclip AI Remote Code Execution
Paperclip is the operating system for your AI company. You set the goals, hire AI agents as employees, and watch them plan and execute work. Prior to version 2026.410.0, Paperclip allows for unauthenticated remote code execution on any network-accessible instance running in authenticated mode wit...
📄 Gogs 0.14.2 Argument Injection
Proof of concept exploit for an argument injection vulnerability in Gogs versions 0.14.2 and below and versions 0.15.0+dev and below. ================================================================================================================================== | Title : Gogs Git Rebase Argume...
SimpleHelp OIDC Authentication Bypass Remote Code Execution
This module exploits CVE-2026-48558 to forge an OpenID Connect identity token and obtain a SimpleHelp technician session. It then uses SimpleHelp's legitimate remote access WebSocket protocol to connect to an online managed machine and execute a payload through the remote terminal. An OIDC provid...
📄 HTTP/2 Multi-Server HPACK Exhaustion
This code implements a multi-target HTTP/2 resource exhaustion framework designed to stress or overwhelm server implementations through protocol-level amplification techniques. It includes server-specific payload generation for multiple platforms, automated connection orchestration, stream scalin...
📄 AnyDesk 9.7.5 Unquoted Service Path
AnyDesk version 9.7.5 suffers from an unquoted service path vulnerability. Exploit Title: AnyDesk v9.7.5 - Unquoted Service Path Date: 2026-06-06 Exploit Author: Milad Karimi Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Vendor Homepage: http://anydesk.com...