280665 matches found
Exploit for CVE-2002-0526
Local Exploits Various local exploits CVE-2020-7247 root...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Really-Simple-Plugins Really_Simple_Security
CVE-2024-10924 — WordPress Auth Bypass Toolkit Really Sim...
Exploit for Injection in Ghost
CVE-2026-29053 Ghost CMS RCE via jsonpath/static-eval prototy...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182-Rea...
Python_Paylod_Exploit
No d...
xss-vulnerable-php
XSS Vulnerable PHP Vanilla Intentionally vulnerable vanilla...
web_security_notes
No d...
Exploit for SQL Injection in Vishalmathur Cloudclassroom-Php-Project
CVE-2026-2058-PoC – CloudClassroom PHP Project SQL Injection...
📄 Microsoft Windows 11 Race Condition / Privilege Escalation
This Metasploit module exploits CVE-2025-62215, a race condition combined with a double-free vulnerability in the Windows Kernel. It allows local privilege escalation from low-privileged users to SYSTEM by exploiting improper synchronization in kernel object handling...
📄 Alipay Open Redirect / API Attacker Payload Insertion
A single crafted URL enables a complete attack chain against Alipay mobile application users that can allow for data exfiltration. As the vendor has stated this is normal behavior with no apparent plans to address the problem, this is being published to make users aware. Alipay Mobile App -...
📄 Microsoft Windows Cloud Files Mini Filter Driver Local Privilege Escalation
Proof of concept exploit for a heap-based buffer overflow vulnerability in the Windows Cloud Files Mini Filter Driver cldflt.sys that allows local attackers to escalate privileges from user-level to SYSTEM-level access on affected Windows systems. The vulnerability exists in the Cloud Files Mini...
WordPress Unauthenticated RCE via Pix for WooCommerce plugin
This Metasploit module exploits an Unauthenticated Arbitrary File Upload vulnerability in the Pix for WooCommerce plugin for WordPress. Attackers can leverage the missing capability check and insufficient file type validation in the 'lknpixforwoocommercec6savesettings' function to upload arbitrar...
📄 SPIP CMS Analysis Scanner Script
This is an exploitation tool designed for websites running the SPIP CMS versions 5.4.0 through 5.11.0. The tool performs automated detection and enumeration of SPIP installations, identifies installed plugins, attempts to determine plugin versions, and searches for forms using the saisies plugin...
📄 Microsoft Windows LNK File Remote Code Execution
This PHP script is a proof of concept exploit that demonstrates how to create a Windows LNK shortcut file that executes a PowerShell command in this example, launches calc.exe...
📄 Microsoft Windows 11 SMB Local Privilege Escalation
Proof of concept for CVE‑2025‑33073, a Microsoft Windows SMB privilege escalation vulnerability that abuses local NTLM reflection behavior within the SMB stack...
Exploit for CVE-2026-30945
🗑️ CVE-2026-30945 StudioCMS IDOR — Arbitrary API Token Revoc...