279416 matches found
📄 Throttlestop Kernel Driver 3.0.0.0 Privilege Escalation
Throttlestop Kernel Driver version 3.0.0.0 suffers from a privilege escalation vulnerability. Exploit Title: Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation Exploit Details: https://xavibel.com/2025/12/22/using-vulnerable-drivers-in-red-team-exercises/ Date: 8/12/2025...
📄 Dovecot passwd-file Path Traversal
This Metasploit auxiliary module targets a path traversal vulnerability in Dovecot's passwd-file authentication backend when per-domain configuration is enabled. ================================================================================================================================== |...
📄 WordPress Highlight and Share 5.2.0 Missing Authentication
WordPress Highlight and Share plugin versions 5.2.0 and below suffers from a missing authentication vulnerability. Exploit Title: WordPress Plugin 5.2.0 - Broken Access Control Date: 2025-09-20 Exploit Author: Zeeshan Haider Vendor Homepage: https://wordpress.org/plugins/ Software Link:...
📄 Eclipse Che WebSocket Machine-Exec Remote Code Execution
This Python script is a WebSocket-based client designed to interact with an Eclipse Che / DevSpaces machine-exec service and test for an unauthenticated remote code execution vulnerability...
WordPress Plugin 5.2.0 - Broken Access Control
Exploit Title: WordPress Plugin 5.2.0 - Broken Access Control Date: 2025-09-20 Exploit Author: Zeeshan Haider Vendor Homepage: https://wordpress.org/plugins/ Software Link: https://wordpress.org/plugins/highlight-and-share/ Version: Description A broken access control vulnerability exists in a...
📄 Dovecot 3.1.0 Authentication Bypass / User Enumeration
This Metasploit auxiliary module targets an LDAP injection vulnerability in Dovecot mail servers that can lead to authentication bypass or user enumeration via IMAP/POP3. Version 3.1.0 is affected...
📄 Dovecot IMAP NOOP Command Memory Exhaustion Denial of Service
This Metasploit auxiliary module targets a memory exhaustion vulnerability in the Dovecot IMAP service. It opens multiple concurrent TCP connections and sends specially crafted NOOP commands containing deeply nested parentheses to force excessive memory allocation on the server. By sustaining the...
📄 Dovecot OTP Replay Attack
This Metasploit auxiliary module targets a vulnerability in Dovecot's OTP One-Time Password authentication system that allows potential replay attacks when authentication caching is enabled and username handling is improperly managed...
Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation
Exploit Title: Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation Exploit Details: https://xavibel.com/2025/12/22/using-vulnerable-drivers-in-red-team-exercises/ Date: 8/12/2025 Exploit Author: Xavi Beltran Vendor Homepage:...
Exploit for Injection in Ghost
This is a rework of the Repo by rootxran for this same CVE - htt...
SQLi-Injection-Payloads
No d...
Exploit for OS Command Injection in Fortinet Fortisandbox
FortiSandbox RCE Scanner — CVE-2026-39808...
recon2exploit
recon2exploit recon2exploit is a single-file security ass...
vulnscanx_v2
⚡ VulnScanX Advanced Vulnerability Scanning & Penetration...
Exploit for Improper Input Validation in Apache Tomcat
No d...
Exploit for CVE-2026-20180
Cisco ISE RCE: Análisis Avanzado de Explotación y Remediación...