CVE-2026-24061-Telnetd

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass CVE: CVE-2026-24061 Severity: Critical CVSS: 9.8 Critical CWE: CWE-88 — Improper Neutralization of Argument Delimiters in a Command Affected Component: GNU Inetutils telnetd Affected Versions: 1.9.3 through 2.7 Overview CVE-2026-24061 is ...

react2shell

React2Shell: RCE 0-day in React Server Components CVE-2025-55182 React and CVE-2025-66478 Next.js This repository contains exploit code for authorized security testing and educational purposes only. See also: Multiple researchers have published analyses of this vulnerability. Check the References...

ligolo-iwa

Ligolo-IWA A Ligolo-ng JavaScript agent working inside Chrome/Chromium-based browsers by leveraging Isolated Web Applications. See the Ligolo-IWA doc for quick setup: Ligolo-IWA Setup/Quickstart And don't forget to read the Ligolo-ng documentation: 📑 Ligolo-ng Documentation Setup/Quickstart Local...

forbidden

Forbidden Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client. Tested on Kali Linux v2024.2 64-bit. Made for educational purposes. I hope it will help! Future plans: Add the silent option to suppress console output. Add the no color option...

CVE-2025-54918-POC

CVE-2025-54918 – Proof of Concept PoC ⚠️ Important Notice IMPORTANT: To test CVE-2025-54918 , you must create a DNS record in the target Active Directory environment. Always consult with the client and obtain explicit authorization before testing, as this can impact DNS and authentication behavior...

slides

slides A collection of slides. 2025 A tale of challenging MTE: Rooting Google Pixel with kernel MTE enabled in one shot Conference: POC 2025 2024 Simple bug but not easy exploit: Rooting Android devices in one shot Conference: Cansecwest 2024 Almost same with POC 2023, except for MTE 2023 Simple...

CVE-2026-111965 Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass

The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form...

CVE-2026-111965 Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass

The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form...

CVE-2026-111965

The Profile Builder WordPress plugin, versions 4.0.0 through 4.0.4 , contains a vulnerability where reCAPTCHA verification is not enforced on all comment submission paths. This flaw allows authenticated users to bypass the anti-spam protections configured by an administrator for the WordPress com...

EUVD-2026-108667

The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form...

bordair-multimodal

Multimodal Prompt Injection Dataset 516,588 labeled samples 251,782 attack + 251,576 benign, plus a 13,230-sample real-world validation split across five dataset versions plus external dataset ingestion, covering cross-modal, multi-turn, adversarial suffix, jailbreak template, indirect injection,...

CVE-2023-43357-CMSmadesimple-Stored-XSS---Shortcut

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title in the My Preferences - Manage Shortcuts Attack Vectors: Scripting A vulnerability in the...

NetworkSandboxEngine

A Linux engine for deterministic nftables firewall testing inside isolated network namespaces. Why NSE? • Oracle contract • Wire assertions • Features • Requirements • Installation • Quickstart • How It Works • Project Structure Why NSE? Testing firewall rulesets on a live Linux system poses...

CVE-2019-17662

CVE-2019-17662 Golang implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit Copy of MuirlandOracle's python script...

evil-winrm

Evil-WinRM !Version-shield !Ruby2.3-shield !Gem-Version !License-shield !Docker-shield The ultimate WinRM shell for hacking/pentesting Description & Purpose This shell is the ultimate WinRM shell for hacking/pentesting. WinRM Windows Remote Management is the Microsoft implementation of...

CVE-2026-84388-POC

FortiPAM Chrome Extension UI Layer RCE PoC - CVE-2026-84388 Overview This repo contains a proof-of-concept exploit for CVE-2026-84388 Improper Restriction of Rendered UI Layers or Frames, CWE-1021. The vulnerability in Fortinet FortiPAM Chrome Extension v7.4–8.0 allows any visited website to bypa...

CVE-2020-1337

CVE-2020-1337 - Binary Planting CVE-2020-1048 bypass Peleg Hadar @peleghd and Tomer Bar at SafeBreach @safebreach were acknowledged by Microsoft by the CVE-2020-1048, a Windows Spooler Vulnerability that allows an elevation of privilege on Windows 7 and later. Some details were disclosed by Alex...

android-hardware-attestation-demo

Android hardware attestation bypass — demo This repository accompanies a Quarkslab article on Android hardware Key Attestation and exists to illustrate it. It is a small, end-to-end proof of concept that shows a simple bypass: an analyst on a rooted phone defeats a backend's hardware attestation...

CVE-2026-49176_LPE_POC

CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026. Technical write-up: CVE-2026-49176 Exploit Development: WalletService to SYSTEM. A standard user creates a Wallet ESE database containing a persisted callbac...

letsdefend-cve2024-3400-case-study

letsdefend-cve2024-3400-case-study Detection, analysis, and response strategies for CVE-2024-3400 exploitation attempts targeting Palo Alto PAN-OS GlobalProtect portals. Includes IOCs, exploit patterns, and mitigation guidance. CVE-2024-3400 Incident Investigation 🔍 Overview This repository...