280580 matches found
Exploit for Command Injection in Paloaltonetworks Pan-Os
CVE KB: A high-quality knowledge base for automatic penetratio...
Exploit for Improper Enforcement of Message Integrity During Transmission in a Communication Channel in Freeradius
RADIUS / FreeRADIUS Security Analysis & PoC Systematic securi...
kexploitbinary
DarkSword Red Team Framework Framework Python com CLI para en...
Exploit for Deserialization of Untrusted Data in Facebook React
No d...
Exploit for Improper Access Control in Apache Hugegraph
CVE-2024-27348: Apache HugeGraph RCE Advanced Sandbox Bypass...
Zero-Trust-Browser-PoC-Pages
Zero-Trus...
tudo-exploits-oswe-prep
tudo-exploits-oswe-prep A project contains all exploits of vul...
Exploit for Code Injection in Apache Commons_Text
ICT287-CVE-202...
RegPwnBOF
🛡️ RegPwnBOF - Simple Registry Action Tool !Download RegPwn...
test-xss
test-xss "test." Install bash np...
📄 Ghost CMS 6.19.0 SQL Injection
Ghost CMS versions 3.24.0 through 6.19.0 suffer from a remote SQL injection vulnerability via the content API. Exploit Title: Ghost CMS Unauthenticated SQLi via Content API Date: 2026-03-30 Exploit Author: Maksim Rogov Exploit Licence: GPL-3.0 Software Link: https://ghost.org/ Version: Ghost =...
📄 Bludit CMS Shell Upload
Bludit CMS versions prior to 3.18.4 have an unrestricted API file upload vulnerability that allows for remote code execution. Exploit Title: Bludit CMS . The uploadFile function performs no file extension or content validation, allowing upload of PHP webshells that execute as www-data. The API...
📄 LuaJIT 2.1.1774638290 Arbitrary Code Execution
LuaJIT's Foreign Function Interface FFI provides unrestricted access to native C functions including syscall, mmap, mprotect and arbitrary shared library loading. When FFI is accessible to untrusted Lua code in embedding scenarios OpenResty, Redis, game engines, IoT, an attacker can achieve...
📄 Forcepoint One Endpoint macOS 25.08.5008 DLP Bypass
Forcepoint One Endpoint DLP Endpoint for macOS version 25.08.5008 with DLP Policy Engine version 10.2.0.298 allows a local standard non-admin user to bypass DLP content inspection and policy enforcement by sending SIGSTOP to user-owned browser helper processes Websense Endpoint Helper,...
Supsystic Contact Form Wordpress Plugin SSTI RCE
This module performs SSTI achieving RCE in webpages containing the Contact Form Wordpress plugin by Supsystic in versions 1.7.36 and before. Module Options msf use exploit/multi/http/wp/pluginsupsysticcontactformrce msf undefinedpluginsupsysticcontactformrce show actions ...actions... msf...
Exploit for SQL Injection in Ghost
CVE-2026-26980 👻 Ghost CMS Unauthenticated SQLi via Content...