279433 matches found
Exploit for Use After Free in Google Chrome
Chromium IndexedDB Use-After-Free RCE Vulnerability CVE-2025-...
📄 Bludit CMS 3.18.2 Shell Upload
This Metasploit module targets a vulnerability in Bludit CMS version 3.18.2 targeting the API file upload mechanism which allows authenticated users with a valid API token to upload arbitrary files without proper validation. This can result in a shell upload...
📄 Trojan-Spy.Win32.Small MVID-2026-0705 Remote Command Execution
Trojan-Spy.Win32.Small malware opens a listener on TCP port 65535, allowing unauthenticated remote attackers with network access to execute arbitrary operating system commands on the infected host. Discovery / credits: Malvuln John Page aka hyp3rlinx c 2026 Original source:...
📄 7-Zip Directory Traversal / Remote Code Execution
This Metasploit local Windows exploit module targets a directory traversal vulnerability in 7-Zip versions prior to 25.00 that can be abused through a malicious ZIP archive to achieve arbitrary code execution when the archive is extracted...
📄 Below Log File Symlink Privilege Escalation
This Metasploit module exploits a local privilege escalation vulnerability in the below utility when executed with sudo. This affects versions prior to 0.9.0. ================================================================================================================================== | Title...
📄 Below Symlink Privilege Escalation
This Python script demonstrates a potential privilege escalation technique related to CVE-2025-27591, leveraging symbolic link symlink manipulation in a logging directory used by the below utility. Versions prior to 0.9.0 are affected...
📄 ASP.net 8.0.10 Core Kestrel HTTP Request Smuggling
This Metasploit auxiliary module targets a critical HTTP request smuggling vulnerability in ASP.NET Core Kestrel caused by improper parsing of malformed chunked transfer encoding notably LF-only line handling and case-variant headers like chUnKEd...
BerriAI LiteLLM Proxy MCP Test Endpoint Command Execution
This module exploits CVE-2026-42271, a command execution vulnerability in the BerriAI LiteLLM proxy. The MCP "test" REST endpoints POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list, used by the admin UI to preview an MCP server before saving it, accept a full server configuration ...
Exploit for CVE-2004-2687
The goal of this script NOT to use Metasplo...
Exploit-for-OSVDB-75095-LotusCMS-3.0
LotusCMS 3.0 eval RCE — Defensive Research Overview This...
-Exploit-for-OSVDB-75095-LotusCMS-3.0-
LotusCMS 3.0 eval RCE — Defensive Research Overview This...
DarkHole-2-Penetration-Testing-Writeup.
DarkHole-2-Penetration-Testing-Writeup. DarkHole 2 is a vulner...
mantis-exploit-patch
No d...
Exploit for Improper Access Control in Fortinet Forticlientems
CVE-2026-35616 Author: wa6n3r | GitHubhttps://github...
Exploit for CVE-2026-2600
CVE-2026-2600 ElementsKit Elementor Addons $item e...
Test-Extensions
Burp Suite Security Extensions — Burp Challenge Objetivo...
skills-exploit-poc
No d...
Exploit for Code Injection in Langflow
No d...