278703 matches found
📄 Espanso 2.3.0 Configuration Injection
This Python script is a configuration manipulation tool for Espanso version 2.3.0 that modifies its YAML configuration file base.yml to add new text triggers capable of executing system commands via shell or script extensions...
📄 Apache ActiveMQ Jolokia Remote Code Execution
This is a proof of concept security research tool that evaluates a potential authenticated remote code execution pathway through the Jolokia management interface exposed by Apache ActiveMQ. The tool authenticates to the broker, discovers configuration details, interacts with JMX operations expose...
📄 Notepad++ 8.9.6 Arbitrary Code Execution
Notepad++ versions 8.9.6 and below proof of concept arbitrary code execution exploit. Exploit Title: Notepad++ 8.9.6 - Arbitrary Code Execution Date: 2026-05-30 Exploit Author: Kavin Jindal Avyukt Security https://www.linkedin.com/in/kavin-jindal/ Vendor Homepage: https://notepad-plus-plus.org...
📄 dmonitor 1.0.3 Server-Side Request Forgery / Redis Enumeration
Proof of concept demonstration exploit for dmonitor version 1.0.3 that leverages an unauthenticated server-side request forgery vulnerability to demonstrate redis access and data enumeration...
WordPress OrderConvo 14 - Path Traversal
Exploit Title: WordPress OrderConvo 14 - Path Traversal Date: 05-31-2026 Exploit Author: Diamorphine Vendor Homepage: https://www.najeebmedia.com/ Software Link: https://wordpress.org/plugins/admin-and-client-message-after-order-for-woocommerce/ Version: 13.5 Tested on: Debian CVE : CVE-2025-1016...
HP Poly Voice Unauthenticated Remote Code Execution
CVE-2026-0826 is a critical unauthenticated stack-based buffer overflow vulnerability affecting all models in the VVX series VVX 150, VVX 250, VVX 350, and VVX 450, as well as three models from the Trio IP Conference series Trio 8800, Trio 8500, and Trio 8300. A remote attacker can leverage...
Software-Security-Exploits
Software Security: Privilege Escalation Attacks SEED Labs pro...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
usage: exploit.py -h --lhost LHOST --lport LPOR...
Windows Kernel Pointer Exposure Enumerator
This module enumerates kernel object pointers exposed via NtQuerySystemInformation with SystemExtendedHandleInformation. It categorizes exposed pointers by object type and provides observational data about kernel address space layout for research and educational purposes. Module Options msf use...
Exploit for Code Injection in Backupbliss Backup_Migration
WordPressBackupMigration-RCEUnauth...
Exploit for CVE-2022-42005
Tesla Security Research Vulnerability research on the Tesla M...
Exploit for Improper Authentication in Google Android
DEDSECBKIF DEDSECBKIF is a keystroke injection tool for Androi...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE !Pytho...
Exploit for CVE-2022-25765
CVE-2022-25765 — Command Injection in pdfkit Descripción...
Exploit for Use After Free in Apache Http_Server
CVE-2019-0211 — Apache HTTP Server Local Privilege Escalation...
Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple
CVE-2019-9053 — Unauthenticated SQL Injection in CMS Made Simp...
Exploit for Improper Access Control in Fortinet Forticlientems
CVE-2026-35616 - Fortinet FortiClientEMS 7.4.5 Unauthenticated...