279382 matches found
Exploit for Stack-based Buffer Overflow in Asustor Data_Master
CVE-2026-6643 — ASUSTOR ADM 5.1.2 RCE Format String CWE-134...
Exploit for Out-of-bounds Read in Polkit_Project Polkit
PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Loca...
cPanel/WHM CRLF Injection Authentication Bypass RCE
Exploits CVE-2026-41940, a CRLF injection in cPanel/WHM's cpsrvd daemon that allows unauthenticated remote code execution as root. The Basic-auth handler writes the password to the raw session file without stripping newlines. Omitting the ob-part of the session cookie bypasses the encoder, so...
OpenCATS Installer PHP Code Injection
This module exploits an unauthenticated PHP code injection in the OpenCATS installer AJAX endpoint CVE-2026-27760. The databaseConnectivity action passes the user POST parameter directly to changeConfigSetting, which interpolates it into a define statement in config.php without any sanitization...
📄 Microsoft WinLogon Registry Deletion / Privilege Escalation
This code represents a highly destructive proof of concept targeting Windows WinLogon and Registry access control mechanisms to achieve privilege escalation and system integrity compromise. The exploit is built around abusing Registry symbolic links and session-based Accessibility paths to redire...
📄 Microsoft Windows TBroker Registry Symlink Information Disclosure
This code demonstrates a proof of concept attack targeting Windows ATBroker Assistive Technology Broker to achieve sensitive information disclosure through unsafe Registry handling...
SQLi-Scanner-Lab
🕸️ Automated SQLi Vulnerability Scanner & Lab 📌 Project Ov...
Exploit for Authentication Bypass by Spoofing in Python-Jwt_Project Python-Jwt
CVE-2022-39227 JWT Authentication Bypass Demo Project Goal...
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
C...
Exploit for Improper Access Control in Nodejs Node.Js
CVE-2026-21636 - Node.js Permission Model UDS/Network Bypass...
Exploit for CVE-2026-33453
Apache Camel 4.18.0 — CVE Security Assessment Three critical...
Exploit for Improper Authentication in Adguard Adguardhome
CVE-2026-32136exploit - AdGuard Home h2c Upgrade Auth Bypass...
name-Omni
Omni – Autonomous Red Team Lead & Bug Bounty Hunter Powered...
reflected-xss-demo
Reflected XSS Demo Small intentionally vulnerable loca...
HTB-WingData-Writeup
HackTheBox - WingData Writeup Difficulty: Easy | OS: L...
Exploit for Improper Input Validation in Microsoft
No d...