278797 matches found
Luban-2040-v2
🛡️ Luban 2040 v2 Advanced Reconnaissance & Vulnerability...
Exploit for Incorrect Implementation of Authentication Algorithm in Google Android
ADB TLS Auth Bypass Exploit CVE-2026-0073 An automated netw...
POCs
----- Summary - This is a POC for CVE-2026-34234 https://cve...
Exploit for CVE-2026-42945
CVE-2026-42945 Nginx Rift Vulnerability Toolkit !CVSS Score:...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit
🔥 CVE-2026-41651 — PackageKit TOCTOU Local Privilege Escalatio...
vulnscan
VulnScan — Automatic Vulnerability Scanner Kali Linux Edit...
Exploit for Download of Code Without Integrity Check in Gin-Gonic Gin
gin-vulnerable Demo consumer pinned to github.c...
Exploit for Server-Side Request Forgery in Ech0
CVE-2026-35037 Ech0 SSRF Lab This repository contains a local...
SOC-Alert-Investigation-Portfolio
SOC Alert Investigation Portfolio This repository contains pr...
Exploit for Incorrect Authorization in Vercel Next.Js
Himalaya Tech Admin Panel — CVE-2025-29927 Demo WARNING:...
Exploit for CVE-2026-46333
ptracemaydream CVE-2026-46333 Local privilege escalation e...
Exploit for Command Injection in Litellm
CVE-2026-42271 — LiteLLM Authenticated Command Injection via M...
📄 ZTE ZXHN H298A 1.1 / H108N 2.6 Unauthenticated Credential Disclosure
ZTE ZXHN H298A 1.1 and H108N 2.6 suffer from an unauthenticated credential exposure vulnerability via the ETHCheat parameter in getpage.lua. Title: ZTE ZXHN H298A 1.1 / H108N 2.6 - Unauthenticated Credential Exposure ETHCheat Parameter Date: 2026-05-20 Author: Mina Nageh Salalma Monx Research CVE...
📄 ZTE ZXHN H188A 6 Authentication Bypass / Credential Disclosure
ZTE ZXHN H188A version 6 suffers from an authentication bypass vulnerability via a pre-login wizard credential leak. Title: ZTE ZXHN H188A V6 - Authentication Bypass via Pre-Login Wizard Credential Leak Date: 2026-05-20 Author: Mina Nageh Salalma Monx Research CVE: CVE-2026-34472 Vendor: ZTE...
📄 Barracuda ESG Spreadsheet::ParseExcel Arbitrary Code Execution
This Metasploit module exploits CVE-2023-7102, an arbitrary code execution vulnerability in Barracuda Email Security Gateway ESG appliances. The vulnerability exists in how the Amavis scanner processes Excel attachments using the Perl Spreadsheet::ParseExcel library. The librarys Utility.pm...
📄 ZTE ZXHN H168N 3.6 Credential Leak / Admin Compromise
ZTE ZXHN H168N version 3.5 suffers from a password leak vulnerability that leads to full administrative compromise. Title: ZTE ZXHN H168N V3.5 - Unauthenticated Wizard Credential Leak to Full Admin Compromise Date: 2026-05-20 Author: Mina Nageh Salalma Monx Research CVE: CVE-2021-21735 Vendor: ZT...
📄 ZTE Unauthenticated Denial of Service
ZTE routers 17+ models suffer from an unauthenticated denial of service vulnerability via an oversized POST body. Title: ZTE Routers 17+ Models - Unauthenticated Denial of Service via Oversized POST Body Date: 2026-05-20 Author: Mina Nageh Salalma Monx Research CVE: CVE-2026-34473 Vendor: ZTE...
Drupal Core PostgreSQL EntityQuery SQL Injection
This module detects CVE-2026-9082, an unauthenticated SQL injection in Drupal core's PostgreSQL EntityQuery condition handler. It uses a crafted JSON:API filter array key to confirm the vulnerability with time-based blind SQL injection. MySQL, MariaDB, and SQLite are not affected. The configured...