278781 matches found
CVEs
NULL Dereference The vulnerabilities found in cryptofioctl...
Mephisto
InMyMine7 - WordPress Auto Exploit !Versionhttps://img.s...
Exploit for CVE-2026-45250
FreeBSD setcred2 — research artifacts This subdirectory col...
Exploit for CVE-2026-9082
CVE-2026-9082 Type: SQL Injection CWE-89 Affected Pr...
psqli
psqli Powerfull Automatic Sql injection Tools Pack Fast...
Exploit for CVE-2026-9082
⚠️ Security Research & Legal Disclaimer 📌 Purpose of This...
Exploit for Improper Certificate Validation in Microsoft
No d...
Exploit for Injection in Traceroute_Project Traceroute
node-vulnerable This repository is a synthetic demo target...
autopenx
AutoPenX – A fully automated CTF-solving & penetration testing...
📄 Cockpit 359 Remote Code Execution
Cockpit versions 357 through 359 suffer from a remote code execution vulnerability. Exploit Title: Cockpit 359 - RCE Date: 18-04-2026 Exploit Author: @intx0x80 Vendor Homepage: https://cockpit-project.org/ Software Link: https://github.com/cockpit-project/cockpit Version: 327-359 Tested on: Debai...
FUXA 1.2.9 - RCE
Exploit Title: FUXA 1.2.9 - RCE Date: 4/24/2026 Exploit Author: Anthony Cihan Hann1bl3L3ct3r Vendor Homepage: https://github.com/frangoteam/FUXA Version: Arbitrary File Write - RCE Affected: FUXA makes Node's path.resolve climb out of appDir to anywhere the FUXA process can write. fullPath/fileNa...
solaredge - (CSRF-OOB-Injection)
Titles: solaredge - CSRF-OOB-Injection Author: nu11secur1tyAI Date: 2026-04-26 Vendor: SolarEdge Technologies Ltd. Software: SolarEdge Monitoring Platform - Framework /solaredge-web/ Reference: https://monitoring.solaredge.com/ Description: The solaredge-CSRF-Hijack vulnerability arises due to a...
Cockpit 359 - RCE
Exploit Title: Cockpit 359 - RCE Date: 18-04-2026 Exploit Author: @intx0x80 Vendor Homepage: https://cockpit-project.org/ Software Link: https://github.com/cockpit-project/cockpit Version: 327-359 Tested on: Debain CVE : CVE-2026-4631 import base64 import argparse import requests import urllib3...
PAN-OS GlobalProtect CAS CVE-2026-0265 Vulnerability Checker
This module checks a PAN-OS GlobalProtect portal for CVE-2026-0265 using the Bishop Fox scanner decision flow. It performs anonymous GET requests to the GlobalProtect prelogin endpoint, retrying transient failures and HTTP 503 responses, then checks whether CAS authentication is enabled, decodes...
Concrete CMS Unauthenticated File Usage Disclosure
Concrete CMS formerly concrete5 9.x before 9.5.1 exposes the file usage dialog controller at /ccm/system/dialogs/file/usage/ without a view permission check CVE-2026-6826. An unauthenticated attacker can enumerate the numeric file ID space and, for every file registered in the file manager, learn...
Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path
Exploit Title: Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path Exploit Author: CENACIF-MX Discovery Date: 2025-12-04 Vendor Homepage: https://support.lenovo.com/es/es/solutions/legionspace Tested Version: 1.7.11.2 Vulnerability Type: Unquoted Service Path Tested on OS: Microsoft...
📄 FUXA 1.2.9 Remote Code Execution
FUXA versions 1.2.9 and below suffers from an unauthenticated path traversal vulnerability that leads to arbitrary file write that enables remote code execution. Exploit Title: FUXA 1.2.9 - RCE Date: 4/24/2026 Exploit Author: Anthony Cihan Hann1bl3L3ct3r Vendor Homepage:...
📄 dompdf Remote Code Execution
This Metasploit module exploits CVE-2022-28368, a remote code execution vulnerability in dompdf versions prior to 1.2.1. The vulnerability exists because dompdf preserves the original file extension when caching fonts downloaded via CSS @font-face rules. By pointing a @font-face src to a .php fil...
📄 Lenovo LegionSpace 1.7.11.2 Unquoted Service Path
Lenovo LegionSpace version 1.7.11.2 suffers from an unquoted service path vulnerability. Exploit Title: Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path Exploit Author: CENACIF-MX Discovery Date: 2025-12-04 Vendor Homepage: https://support.lenovo.com/es/es/solutions/legionspace...