280810 matches found
📄 WBCE CMS 1.6.5 LFI / Config Disclosure / Cross Site Scripting
The WBCE CMS frontend loader includes template files without sanitization. This allows local file inclusion, reading configuration files, and persistent cross site scripting via crafted templates. Version 1.6.5 is affected...
📄 Vivotek Camera Firmware OS 0125c Command Injection
Vivotek Camera Firmware OS versions 0100a through 0125c suffer from a command injection vulnerability. The issue resides in the CGI binary uploadmap.cgi, which operates under the Boa Webserver environment. The vulnerability occurs because the application improperly processes the POSTFILENAME...
📄 Universal‑Ctags V Language 6.2.1 Parser Uncontrolled Recursion
A denial of service issue has been discovered in Universal‑Ctags versions 6.2.1 and below affecting the V language parser component. ============================================================================================================================================= | Title :...
📄 ASUS Router Multi-Stage Command Injection
A multi‑stage command injection vulnerability allows an attacker to achieve remote command execution on a vulnerable ASUS router by abusing the SETROOTCERTIFICATE and APPLYAPP HTTP methods. In the first stage, a malicious shell script is uploaded to the target system disguised as a certificate fi...
Exploit for Use After Free in Redis
🚨 CVE-2025-49844 — “RediShell” Critical Remote Code Execu...
Exploit for Unrestricted Upload of File with Dangerous Type in Apache Answer
No d...
Exploit for Improper Privilege Management in Microsoft
CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation...
Exploit for Deserialization of Untrusted Data in Google Android
🔥 ZygoteExploitDemo - CVE-2024-31317 Android Security Lab...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Flexense Vx_Search
No d...
Linux RC4 Encrypted Payload Generator
This evasion module packs Linux payloads using RC4 encryption and executes them from memory using memfdcreate for fileless execution. Linux kernel version support: 3.17+ Module Options msf use evasion/linux/x64/rc4packer msf evasionrc4packer show actions ...actions... msf evasionrc4packer set...
LeakIX Search
This module uses the LeakIX API to search for exposed services and data leaks. LeakIX is a search engine focused on indexing internet-exposed services and leaked credentials/databases. An API key is required free at https://leakix.net. Actions: SEARCH - Query LeakIX with a search string and scope...
web-vulnerability-scanner
Web Vulnerability Scanner This project is a simple Python too...
challenge-yourself-level-1
Attack Path Lab !GitHubhttps://img.shields.io/badge/GitHu...
New-Shellcode-Injection-Exploit
Shellcode Injection Exploit Author Created by 0x5da...
Double-Free-Heap-Exploit
Double-Free Heap Exploit Author Created by 0x5da Toa...
poc-factory-sample-output
Prompt Injection Guardrails Introduction In the rapidly e...
Exploit for CVE-2026-30862
CVE-2026-30...