278822 matches found
📄 PJPROJECT 2.16 Buffer Overflow
PJPROJECT versions 2.16 and below suffer from a heap buffer overflow vulnerability. Exploit Title: PJPROJECT 2.16 - Heap Bufferoverflow Google Dork: CVE-2026-25994 PJSIP PJNATH pjsip ≤ 2.16 Date: Apr 6 2026 Exploit Author: V.Nos - BinSmaser Team Vendor Homepage: https://github.com/pjsip/pjproject...
PJPROJECT 2.16 - Heap Bufferoverflow
Exploit Title: PJPROJECT 2.16 - Heap Bufferoverflow Google Dork: CVE-2026-25994 PJSIP PJNATH pjsip ≤ 2.16 Date: Apr 6 2026 Exploit Author: V.Nos - BinSmaser Team Vendor Homepage: https://github.com/pjsip/pjproject Software Link: https://github.com/VABISMO/cve-2026-25994PJSIP Version: rxufrag; -...
WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI
Exploit Title: WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI Date: 3/30/2026 Exploit Author: bootstrapbool Vendor Homepage: https://supsystic.com/plugins/contact-form-plugin/ Software Link: https://wordpress.org/plugins/contact-form-by-supsystic/ Version: str: try: res = requests.geturl...
Apache HertzBeat 1.8.0 - Remote Code Execution
Exploit Title: Apache HertzBeat 1.8.0 - Remote Code Execution Google Dork: N/A Date: 2026-03-09 Exploit Author: Brett Gervasoni Vendor Homepage: https://hertzbeat.apache.org/ Software Link: https://github.com/apache/hertzbeat/releases Version: 1.8.0 Tested on: Linux Docker; official HertzBeat...
📄 GestioIP 3.5.7 Remote Command Execution
This Metasploit module exploits a command execution via file upload. If GestioIP is configured to use no authentication for admin account, no password is required to exploit the vulnerability. Otherwise, an authenticated user with admin right on the web site is required to exploit. This module...
📄 ePati Antikor NGFW 2.0.1301 Authentication Bypass
ePati Antikor NGFW version 2.0.1301 suffers from an authentication bypass vulnerability. Exploit Title: ePati Antikor NGFW 2.0.1301 - Authentication Bypass Date: 2026-04-13 Exploit Author: SADIK ERTÜRK Vendor Homepage: https://www.epati.com.tr/ Software Link: https://www.epati.com.tr/antikor-ngfw...
📄 WordPress Supsystic Contact Form 1.7.36 Server-Side Template Injection
Proof of concept code execution exploit for a server-side template injection vulnerability in WordPress Supsystic Contact Form plugin versions 1.7.36 and below Exploit Title: WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI Date: 3/30/2026 Exploit Author: bootstrapbool Vendor Homepage:...
Fragnesia LPE (CVE-2026-46300)
This module exploits CVE-2026-46300, a Linux kernel local privilege escalation vulnerability introduced in version 4.10. The flaw resides in the kernel's IPsec ESP-in-TCP handling: when an ESP-encapsulated TCP segment containing a shared fragment SKBFLSHAREDFRAG is received and decrypted, the...
Linux Kernel __ptrace_may_access() Exit Race chage File Disclosure
This module exploits a race condition in the Linux kernel doexit teardown path affecting ptracemayaccess. During process termination, privileged file descriptors may remain accessible through pidfdgetfd after task-mm becomes NULL, allowing sensitive file disclosure from privileged SUID binaries...
Security-Advisories
Security Advisories Public security advisories and proof-of-c...
Exploit for CVE-2026-40369
CVE-2026-40369: Arbitrary Kernel Address Increment via NtQuery...
Rcon-Bruteforce
RCON Scanner & Exploitation Toolkit ⚠️ EDUCATIONAL PURPOSE...
Exploit for Out-of-bounds Write in Google Chrome
CVE-2023-4863 — Laboratorio de explotación de libwebp Reprodu...
Exploit for Write-what-where Condition in Linux Linux_Kernel
Dirty Frag: Universal Linux LPE Abstract This document e...
Exploit for Heap-based Buffer Overflow in Postgresql
CVE-2026-2005 - PostgreSQL pgcrypto Heap Overflow Exploit PoC...
Stored-XSS-Vulnerability-Lab-Detection-Mitigation-
Stored Cross-Site Scripting XSS Vulnerability Report Exe...
neo-pocs
neo-pocs Containerized proof-of-concept packages for reviewed...