20916 matches found
📄 Sophos Web Virtual Appliance 3.7.0 Directory Traversal
Proof of concept exploit for an older vulnerability from 2013 where Sophos Web Virtual Appliance version 3.7.0 suffered from a directory traversal vulnerability...
Security vulnerabilities in Silicon Labs Gecko SDK and Silicon Labs Simplicity SDK
The Silicon Labs Gecko SDK GSDK and Silicon Labs Simplicity SDK are both open-source products from Silicon Labs. The Silicon Labs Gecko SDK is a library that combines the Silicon Labs wireless software development kit SDK with the Gecko platform into an integrated software package. The Silicon La...
PT-2026-21016
Name of the Vulnerable Software and Affected Versions Silicon Labs PSA Crypto and SE Manager versions affected versions not specified Description An integer underflow issue exists in the EC-JPAKE APIs during ZKP parsing within Silicon Labs’ PSA Crypto and SE Manager implementation. Exploitation o...
Exploit for CVE-2026-5252
CVE-2026-...
Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access
CVE-2026-1731 Blind RCE PoC Effected Versions: - Privi...
Withdrawn Advisory: Libredesk has a SSRF Vulnerability in Webhooks
Reconsidered - Working as designed. Update 2026-05-28 Libredesk is a single-tenant, self-hosted application. Configuring outbound webhook URLs requires an admin-only permission that is not granted by default - the operator must explicitly assign it. Anyone holding this permission already has full...
📄 RuoYi 4.7.9 Advanced SQL Injection Exploitation Toolkit
This Python script is a sophisticated SQL injection exploitation tool that targets Java web applications specifically RuoYi framework, with additional remote code execution capabilities. The tool performs blind SQL injection attacks and includes multiple methods for escalating from SQL injection ...
📄 motionEye 0.43.1b4 Remote Command Injection
A remote command injection vulnerability exists in motionEye versions up to and including 0.43.1b4. The issue arises from improper validation and sanitization of user‑supplied input within camera configuration parameters. Under certain conditions, authenticated users can inject crafted input that...
📄 RustFly 2.0.0 Event Manipulation
The remote UI control mechanism of RustFly accepts raw hex-encoded instructions over UDP. Some sequences trigger execution of remote system-level operations. Improper sanitization allows command-level injection. Version 2.0.0 is affected...
CVE-2026-28448
creationtimestamp| type| source ---|---|--- 2026-02-17 21:37:55+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-33rq-m5x2-fvgf...
CVE-2026-28467
creationtimestamp| type| source ---|---|--- 2026-02-17 21:30:48+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-wfp2-v9c7-fh79...
CVE-2026-25766
creationtimestamp| type| source ---|---|--- 2026-02-17 15:04:59+00:00| published-proof-of-concept| https://github.com/labstack/echo/security/advisories/GHSA-pgvm-wxw2-hrv9...
Exploit for CVE-2025-4517
CVE-2025-4517-P...
CVE-2026-27016
creationtimestamp| type| source ---|---|--- 2026-02-17 00:36:01+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-fqx6-693c-f55g...
CVE-2026-26991
creationtimestamp| type| source ---|---|--- 2026-02-17 00:35:27+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-5pqf-54qp-32wx...
CVE-2026-26992
creationtimestamp| type| source ---|---|--- 2026-02-17 00:35:22+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-93fx-g747-695x...
📄 PopojiCMS 2.0.1 Code Injection
PopojiCMS version 2.0.1 remote PHP code injection proof of concept exploit. ============================================================================================================================================= | Title : PopojiCMS 2.0.1 PHP COde Injection Vulnerability | | Author : indoush...
OpenSSL 3.x QUIC Initial Packet Builder / Sender
This script is a proof of concept QUIC client that constructs fully encrypted initial packets with header protection. It can be used for testing or fuzzing QUIC/TLS 1.3 implementations. The script constructs and sends a cryptographically valid QUIC Initial packet over UDP. It simulates a QUIC...
📄 GNU Inetutils 2.7 Authentication Bypass
GNU Inetutils version 2.7 telnet authentication bypass proof of concept exploit written in PHP. ============================================================================================================================================= | Title : GNU Inetutils Telnet Authentication Bypass PHP...