280234 matches found
Exploit for CVE-2020-1938
CVE-2020-1938 Tomcat AJP Ghostcat Analysis This repository co...
Exploit for CVE-2026-27739
-CVE-2026-27739-poc curl -H "X-Forwarded-For: http://169.254...
LLMtary
LLMtary Elementary — AI-Powered Penetration Testing Platform...
Exploit for CVE-2026-0740
CVE-2026-0740 : Ninja Forms - File Upload = 3.3.26 Unauthenti...
exploit-code-management
Viết code python deploy 1 web với các yêu cấu sau - Thực hiện co...
Exploit for Improper Restriction of XML External Entity Reference in Wordpress
🔥 The Exploit Foundry !Pythonhttps://img.shields.io/badge...
📄 Cockpit CMS 2.13.5 Cross Site Scripting
Cockpit CMS version 2.13.5 suffers from a persistent cross site scripting vulnerability in the content model display template. The $interpolate function in /modules/App/assets/js/app/utils.js uses new Function to evaluate template strings, allowing arbitrary JavaScript execution. Any authenticate...
7-Zip 24.00 - Directory Traversal
Exploit Title: 7-Zip 25.00 - Directory Traversal to RCE via Malicious ZIP Date: 2025-11-22 Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer Vendor Homepage: https://www.7-zip.org Software Link:...
FortiWeb 8.0.2 - Remote Code Execution
Exploit Title: FortiWeb 8.0.2 - Remote Code Execution Date: 2025-11-22 Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer Vendor Homepage: https://www.fortinet.com Software Link:...
Horilla v1.3 - RCE
Exploit Title: Horilla v1.3 - RCE Date: 2025-05-29 Exploit Author: Raghad Abdallah Al-syouf Version: = 1.3 Tested on: Ubuntu / Docker CVE: CVE-2025-48868 Description: This script exploits the authenticated RCE vulnerability CVE-2025-48868. It logs into the target web app, creates a project, and...
📄 Dolibarr 23.0.0 dol_eval_standard() Whitelist Bypass
Dolibarr version 23.0.0 bypass proof of concept exploit. The whitelist mode of dolevalstandard does not apply $forbiddenphpstrings checks, and the function-call regex does not detect PHP dynamic callable syntax. This allows 'exec''cmd' to bypass all validation and reach eval. !/usr/bin/env python...
Microsoft MMC MSC EvilTwin - Local Admin Creation
!/usr/bin/env python3 Exploit Title: Microsoft MMC MSC EvilTwin - Local Admin Creation Date: 2025-11-22 Author: Mohammed Idrees Banyamer Author Country: Jordan GitHub: https://github.com/mbanyamer Vendor Homepage: https://www.microsoft.com Software Link: N/A built-in Windows component - mmc.exe...
SQLite 3.50.1 - Heap Overflow
Exploit Title: SQLite 3.50.1 - Heap Overflow Date: 2025-11-05 Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer Vendor Homepage: https://www.sqlite.org Software Link: https://www.sqlite.org/download.html Version: SQLite 3.50....
xibocms 3.3.4 - RCE
Exploit Title: XiboCMS 3.3.4- Remote Code Execution Google Dork: N/A Date: 2025-11-18 Exploit Author: complexusprada Vendor Homepage: https://xibo.org.uk/ Software Link: https://github.com/xibosignage/xibo-cms Version: 1.8.0 - 2.3.16, 3.0.0 - 3.3.4 Tested on: Ubuntu Linux Docker, Xibo CMS 3.3.4...
Exploit for Eval Injection in Langflow
CVE-2026-33017-Langflow-POC Proof-of-con...
Exploit for OS Command Injection in Paessler Prtg_Network_Monitor
...
penetration-testing-engagement
Internal Network Penetration Test Overview Conducted a ful...
AD/CS Authenticated Web Enrollment Services Module
Authenticates to the AD/CS Web enrollment service and allows the user to query templates and create certificates based on available templates. Module Options msf use auxiliary/admin/http/webenrollmentcert msf auxiliarywebenrollmentcert show actions ...actions... msf auxiliarywebenrollmentcert set...