278021 matches found
Exploit for Numeric Truncation Error in Fortinet Fortios
CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remo...
Exploit for CVE-2026-16348
CVE-2026-16348 TP-Link Archer BE800 V1 — Authenticated RCE v...
Exploit for CVE-2026-15469
CVE-2026-15469 — Hard-coded Mesh Group Private Key in TP-Link...
Exploit for CVE-2026-18963
CVE-2026-18963 Keycloak reset-credentials bypass → unauthent...
Exploit for CVE-2026-18963
CVE-2026-18963 — Lab tái dựng lại Keycloak reset-credentials...
Exploit for CVE-2026-18963
CVE-2026-18963 Keycloak reset-credentials bypass → unauthenti...
Qinglong-Combo-Exploit
🐉 Qinglong Combo Exploit Qinglong Panel Three Vulnerabili...
cyber-apocalypse-2026-salt-crown
Cyber Apocalypse CTF 2026: The Salt Crown — Writeups Writeups...
Exploit for CVE-2026-32475
CVE-2026-32475 — Elementor Pro Unauthenticated Arbitrary File...
Exploit for Improper Isolation or Compartmentalization in Mozilla Firefox
CVE-2026-12295 — srcdoc data on a non-about:srcdoc URI Firefo...
CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
!/usr/bin/env python3 """ CVE-2026-42167 — ProFTPD modsql post-authentication SQL injection - RCE postauthstorrce.py --host --port 21 \ --user --password \ --shell-host --shell-port 4444 SUMMARY ------- ProFTPD's modsql logs FTP activity through user-supplied SQL. Its escaping helper isescapedtex...
12 Step Meeting List 3.17 - 3.19.16 - Unauthenticated Stored XSS via Geocode Event Log
Description The plugin does not sanitise and escape a value submitted by unauthenticated users before storing it in its activity log and outputting it back in an admin area page, leading to a Stored Cross-Site Scripting issue which could be used against high privilege users such as admin. The PoC...
...[ More ]
This Metasploit module exploits CVE-2026-66066 in Ruby on Rails Active Storage when the application uses the Vips variant processor and accepts untrusted image uploads. A crafted MATLAB v7.3/HDF5 image uses external storage to read text files accessible to the Rails worker through a PNG...
...[ More ]
This Metasploit module exploits CVE-2026-16232, an authentication bypass in the Check Point SmartConsole login process affecting Security Management Server and Multi-Domain Security Management Server. A vulnerable management server accepts a client-supplied SIC distinguished name during an...
Ekushey Project Manager CRM 5.0 Cross Site Scripting
A persistent cross site scripting vulnerability was identified in Ekushey Project Manager CRM version 5.0. The issue was found in the application settings, specifically the Name field. CVE-2026-26211 — Stored XSS in Ekushey Project Manager CRM Product: Ekushey Project Manager CRM Version: 5.0...
Exploit for CVE-2026-18963
CVE-2026-18963 — Keycloak Reset-Credentials Bypass → Account T...
Exploit for Improper Privilege Management in Mozilla Firefox
CVE-2026-74939 — Firefox content→parent privilege escalation...
Acelle-Mail-4.0.24-Unauthenticated-Path-Traversal-to-RCE-Chain
Acelle Mail Note: The path traversal alone Step 1 is su...