279430 matches found
Exploit for Incorrect Authorization in Polkit_Project Polkit
CVE-2021-3560-Polkit-Privilege-Esclation PoC Original rese...
exploitra
🚀 EXPLOITRA v1.0 - Advanced Vulnerability Engine EXPLOITRA...
Exploit for Missing Authentication for Critical Function in Nginxui Nginx_Ui
CVE-2026-27944 + CVE-2026-33032 — nginx-ui Zero-Credential RCE...
runtime-exploit-guard
Container Exec - Python Script Reads attack-vuln-image-mappi...
Exploit for CVE-2026-39842
CVE-2026-39842: OpenRemote Expression Injection RCE in Rules E...
n-days-poc-benchmark-and-dataset
ICS N-Day Vulnerability PoC Benchmark Suite A structured coll...
reconauto
reconauto Automated b...
Exploit for CVE-2026-40176
CVE-2026-40176 Composer Perforce Repository Remote Code Ex...
JD-Security-SHENYI-Team
No d...
Exploit for CVE-2026-0740
CVE-2026-0740 🧩 Overview CVE-2026-0740 is an un...
Exploit for CVE-2026-40175
CVE-2026-40175 — Axios CRLF Injection / HTTP Request Smuggling...
Exploit for CVE-2026-29000
CVE-2026-29000: Proof of Concept PoC for pac4j-jwt Auth Bypa...
📄 MCPJam Inspector 1.4.2 Remote Code Execution
This Metasploit auxiliary module targets a remote code execution vulnerability in MCPJam Inspector version 1.4.2. The flaw exists in the /api/mcp/connect endpoint, where user-controlled input is improperly passed to a backend execution mechanism...
📄 ddev ZipSlip Path Traversal
A ZipSlip path traversal vulnerability exists in the ddev/ddev project, affecting archive extraction routines. The issue allows a crafted ZIP archive to write files outside the intended extraction directory, potentially leading to arbitrary file overwrite on the host system...
📄 V8 Sandbox Bypass: BigInt Division Memory Corruption
This is a variant of crbug.com/474041332. The issue there was that MultiplyFFT, an optimized version of integer multiplication for very large inputs, is not robust against concurrent modification of its input buffers, but was called from ProcessorImpl::FromStringLarge with a temporary buffer insi...
📄 Activitypub-federation-rust 0.7.1 Server-Side Request Forgery
This is a server-side request forgery scanner for Activitypub-federation-rust version 0.7.1. ================================================================================================================================== | Title : Activitypub-federation-rust 0.7.1 Lemmy ActivityPub SSRF Scanne...
📄 PCLink 4.1.1 Authentication Bypass / Code Execution
PCLink version 4.1.1 trusts localhost requests with the "X-Internal-Auth: true" header, bypassing all authentication. Combined with unrestricted extension installation, this allows arbitrary code execution. Exploit Title: PCLink v4.1.1 - Authentication Bypass Leading to Remote Code Execution Date...
📄 EspoCRM 9.3.3 Remote Code Execution
This Metasploit module targets an authenticated remote code execution vulnerability in EspoCRM versions 9.3.3 and below. ================================================================================================================================== | Title : EspoCRM ≤ 9.3.3 Authenticated RCE...