280705 matches found
📄 Vvveb CMS 1.0.5 Command Injection
Proof of concept exploit for a remote command injection vulnerability in Vvveb CMS version 1.0.5 via configuration files. Upon further analysis, the researcher has also discovered that this affects version 1.0.7.3...
📄 Nginx UI 2.3.3 Unauthenticated Backup Disclosure / Decryption
This Python proof‑of‑concept demonstrates an unauthenticated information disclosure vulnerability in Nginx UI tracked as CVE-2026-27944. The vulnerability allows a remote attacker to access the /api/backup endpoint without authentication and retrieve a backup archive of the server configuration...
📄 WatchGuard Firebox Default SSH Credentials
This is a python script to detect whether or not WatchGuard Firebox devices allow unauthorized access via default credentials admin:readwrite on port 4118. =============================================================================================================================================...
📄 BuptLab DNS Relay Server 1.0 Denial of Service
A remote denial of service vulnerability exists in BuptLab DNS Relay Server version 1.0 due to improper validation of DNS label length during query parsing. An attacker can send a specially crafted DNS request containing an invalid label length field that exceeds the actual payload size. When the...
📄 Easy Grade Pro 4.1 Malformed .EGP File Denial of Service
This Python script generates a malformed .EGP gradebook file designed to trigger a crash in Easy Grade Pro 4.1 by corrupting data at a specific offset within the file...
📄 BuptLab DNS Relay Server 1.0 Buffer Underflow
This is a proof of concept exploit that leverages a remote heap buffer underflow denial of service vulnerability in BuptLab DNS Relay Server version 1.0.0 that was recently discovered by Antonius...
📄 FreeFloat FTP Server 1.0 Buffer Overflow
Proof of concept exploit for a buffer overflow vulnerability in FreeFloat FTP Server version 1.0. The exploit works by sending an overly long payload through the NOOP FTP command, which overflows the server's buffer and allows control of the EIP Extended Instruction Pointer...
rami-kali-MCP
Red Team MCP Server MCP Model Context Protocol server that...
Exploit for CVE-2026-1357
🧨 CVE-2026-1357 – WPvivid Null-Key Exploit Tool CVE-2026-135...
Exploit for CVE-2025-27136
CVE-2025-27136 Exploiting an XML External Entity XXE Vulnera...
Exploit for OS Command Injection in Signalk Signal_K_Server
CVE-2025-66398 — Signal K Server RCE PoC...
Exploit for OS Command Injection in Gl-Inet Gl-Mt300N-V2_Firmware
🥭 MangoPunch: CVE-2022-31898 Authenticated OS Command Inje...
sql-injection-corpus
SQL Injection Corpus - User Guide Overview This corpus con...
Exploit for OS Command Injection in Gl-Inet Gl-Mt300N-V2_Firmware
GL-InjectoR: CVE-2022-31898 Authenticated Command Injection in...
Exploit for Code Injection in Rejetto Http_File_Server
Optimum --- Optimum – Hack The Box Writeup Overview I...
Exploit for CVE-2026-27944
Nginx UI Discovery Scanner - CVE-2026-27944 Version Detector ht...