292902 matches found
osTicket PDF PHP Filter File Read (CVE-2026-22200)
Horizon3: submits an open.php ticket whose rich-text message abuses mPDF list-style-image php://filter chains. Retrieve bytes from the ticket PDF extract BMP / use Horizon3 extractpdfimages.py. No framework session. !/usr/bin/env python3 -- coding: utf-8 -- """ CVE-2026-22200 — osTicket anonymous...
FortiClient EMS CVE-2023-48788 Registration SQLi Detect
Horizon3 probe: TLS registration message with SQLi; vulnerable hosts respond with KAINTERVAL. !/usr/bin/env python3 -- coding: utf-8 -- """Detect FortiClient EMS registration SQLi CVE-2023-48788, Horizon3.""" from kittysploit import from lib.protocols.tcp.forticlientemsclient import...
Zammad WebSocket Session Leak RCE (CVE-2026-102489)
Horizon3 chain for CVE-2026-102489: WebSocket event base triggers NoMethodError leaking connected users Cookie headers; hijacked session installs malicious ERB via packages API and triggers password-reset template evaluation. Blind file output on target default /tmp/zammadrce.txt. !/usr/bin/env...
Palo Alto Expedition CVE-2024-9465 SQLi Detect
Horizon3 check: Checkpoint parser SQL injection via SLEEP10. No session — chain with exploits/multi/http/paloaltoexpeditioncve20249464rce. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Palo Alto Expedition unauthenticated SQLi CVE-2024-9465, Horizon3.""" import time from kittysploit import...
Exploit for CVE-2026-9151
CVE-2026-9151 Authenticated OS command injection in the Arche...
Exploit for CVE-2026-112816
CVE-2026-112816 — LXD / MicroCloud client-certificate chain au...
Exploit for CVE-2026-105192
B63-POC-CVE-2026-105192 — LMCache multiprocess transport RCE...
Exploit for Code Injection in Gitea
B63-POC-CVE-2026-60004 — Gitea diffpatch RCE Verification l...
Exploit for Path Traversal in Grafana
C...
Exploiting-Vulnerable-Hosts-4e--Ethical-Hacking
Exploiting-Vulnerable-Hosts-4e--Ethical-Hacking a completed et...
Exploit for CVE-2026-86962
C...
Exploit for CVE-2026-98260
CVE-2026-98260 Timer LPE — OPPO Pad Air 5 OPD2501 / MT6878 P...
defender-lab-notes
defender-lab-notes Defensive lab notes php2shell-style: i...
jackknife
Jackknife - Simulated PoC Tabletop Exercise Artifact This...
Exploit for CVE-2026-116296
CVE-2026-116296 — Gitea Archived Repository Write-Protection B...
Exploit for Use After Free in Apple Safari
switch-webkit Browser-delivered exploit work for Nintendo S...
F-SOCIETY
F-SOCIETY Author: L1ghtXr — Contribution: DevBrezz F...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618PHP2SHELL This lab demonstrates PHP 8.4.26 c...