280589 matches found
SQL-Injection-Scanner
No d...
Exploit for CVE-2024-51348
CVE-2024-51348: Unauthenticated Remote Code Execution in BS Pe...
Exploit for CVE-2025-9074
Description Vibe coded a small exploit script in pure Bash wit...
darksword-kexploit
DarksSword Kernel Exploit Rei...
Exploit for Path Traversal in Apache Http_Server
PoC ΡΠΌΡΠ»ΡΡΠΈΡ Π΄Π»Ρ CVE CVE CVE-2021-41773 ΠΡΠ°ΡΠΊΠΎΠ΅ ΠΎΠΏ...
websec-audit
π websec-audit Professional Web Security Audit Framework...
Exploit for OS Command Injection in Signalk Signal_K_Server
β οΈ cve-2025-66398 - Simple RCE Proof of Concept Tool !Downl...
xerteonlinetoolkits-rce
Xerte Online Toolkits '/readme.txt|.html|php|php5|php|p...
π Webb Fontaine Trade Portal Information Disclosure
A security vulnerability was identified in the Webb Fontaine Trade Portal affecting the codification module /trade/help/codification. The issue allows unauthorized users to trigger data export functionality via the /export/excel endpoint without proper validation of session state or user...
π MailEnable 10.54 Cross Site Scripting
MailEnable versions 10.54 and below suffer from multiple cross site scripting vulnerabilities. --------------------------------------------------------------------------- MailEnable = 10.54 Multiple Reflected Cross-Site Scripting Vulnerabilities...
π Starlink DNS Rebinding
This Metasploit auxiliary module implements a DNS rebinding attack targeting Starlink infrastructure CVE-2023-52235. The module operates by running a malicious DNS server that dynamically switches responses from a public IP to internal network targets, enabling access to internal services. It als...
π Digital Watchdog DVR VMAX / DW-VP / DW-VA Credential Disclosure / Code Execution
Digital Watchdog DVR versions VMAX, DW-VP, and DW-VA suffer from unauthenticated credential disclosure and post-authentication remote code execution vulnerabilities. Exploit Title: Digital Watchdog DVR VMAX/DW-VP/DW-VA unauth credential disclosure and post-auth RCE Date: 2026-01-06 Exploit Author...
π Barracuda ESG TAR Filename Command Injection
This Metasploit module exploits CVE-2023-2868, a command injection vulnerability in Barracuda Email Security Gateway ESG appliances. The vulnerability exists in how the ESG processes TAR file attachments - filenames containing shell metacharacters backticks are passed directly to shell commands...
Windows Routing and Remote Access Service integer overflow
Added: 03/23/2026 Background The Windows Routing and Remote Access Service supports remote user or site-to-site connectivity by using VPN or dial-up connections. Problem An integer overflow vulnerability in the Windows Routing and Remote Access Service allow command execution when a domain-joined...
π Cursor IDE MCP Deeplink Remote Code Execution
This Metasploit module exploits the MCP deeplink functionality in Cursor IDE through social engineering. The cursor:// protocol handler can be abused when a user accepts an installation prompt, leading to arbitrary command execution...
Windows Routing and Remote Access Service integer overflow
Added: 03/23/2026 Background The Windows Routing and Remote Access Service supports remote user or site-to-site connectivity by using VPN or dial-up connections. Problem An integer overflow vulnerability in the Windows Routing and Remote Access Service allow command execution when a domain-joined...
π OpenEMR 8.0.0 Authenticated SQL Injection
OpenEMR version 8.0.0 authenticated remote SQL injection exploit that leverages the name parameter in ajax/graphs.php. ====================================================================================================================== | Title : OpenEMR 8.0.0 Authenticated SQL Injection via nam...
π Starlink DNS Rebinding
This python script implements a DNS rebinding attack targeting Starlink infrastructure CVE-2023-52235. ================================================================================================================================== | Title : Starlink DNS Rebinding Exploit | | Author : indoushka...