991 matches found
Exploit for CVE-2026-31431
Copy Fail PoC English Python PoC for CVE-2026-31431,...
Exploit for CVE-2026-31431
CVE-2026-31431 — Local Privilege Escalation via AFALG !N...
Exploit for CVE-2026-31431
Author: 0xShe Language / 语言 - English: https://github.com/0xSh...
PT-2026-34598
Name of the Vulnerable Software and Affected Versions CI4MS Theme affected versions not specified Description The upload function in CI4MS Theme fails to validate entry names when extracting user-uploaded ZIP archives. This allows an authenticated backend user with theme create permissions to...
PT-2026-36837
Name of the Vulnerable Software and Affected Versions D-Link DIR-456U Hardware Revision A1 Description The device contains a hardcoded telnet backdoor. At boot, a telnet daemon is started via the script '/etc/init0.d/S80telnetd.sh' using the username "Alphanetworks" and a static password "whdrv01...
CVE-2026-21915
The CVE describes a vulnerability in Juniper Networks’ JSI Virtual Lightweight Collector (vLWC). A Permissive List of Allowed Input in the CLI enables local, high-privilege attackers to inject shell commands that run with root permissions, potentially yielding full system control. Affected: all J...
FortiWeb 8.0.2 - Remote Code Execution
Exploit Title: FortiWeb 8.0.2 - Remote Code Execution Date: 2025-11-22 Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer Vendor Homepage: https://www.fortinet.com Software Link:...
Exploit for OS Command Injection in Vsftpd_Project Vsftpd
🧨 Metasploitable 2 Penetration Testing Lab 📅 Duration 2026...
Exploit for OS Command Injection in Vsftpd_Project Vsftpd
🔐 Pentest Lab — Metasploitable2 📋 Description Premier lab...
Exploit for OS Command Injection in Nagios Nagios_Xi
Nagios-CVE-2019-15949-RCE-Poc a python PoC for the CVE-2019-15...
Exploit for CVE-2024-14027
CVE-2024-14027 - SlopSploit The exploits were tested on 6.6...
CVE-2026-26478
A shell command injection vulnerability in Mobvoi Tichome Mini smart speaker 012-18853 and 027-58389 allows remote attackers to send a specially crafted UDP datagram and execute arbitrary shell code as the root account...
CVE-2026-25603
The CVE-2026-25603 issue is a path traversal vulnerability in Linksys MR9600 and MX4200. Affected products and versions are MR9600 1.0.4.205530 and MX4200 1.0.13.210200. The underlying flaw is improper limitation of a pathname to a restricted directory, allowing contents of a USB drive partition ...
PT-2026-21778
Name of the Vulnerable Software and Affected Versions Linksys MR9600 version 1.0.4.205530 Linksys MX4200 version 1.0.13.210200 Description A path traversal issue exists in Linksys MR9600 and MX4200 devices. This allows the contents of a USB drive partition to be mounted in an arbitrary location...
Informix-INFORMIXDIR-bof-exploit
informix-informixdir-bof A root shell exploit for a stack-bas...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Heavily influenced/copied/based on the format of a similar repo...
Exploit for Argument Injection in Gnu Inetutils
!Authorhttps://img.shields.io/badge/Author-Mohammed%20Idrees%...
Exploit for Incorrect Authorization in Suse Pam-Config
CVE-2025-6018 + CVE-2025-6019 Exploit Linux Local Privilege...
SUSE CVE-2026-24740
Dozzle is a realtime log viewer for docker containers. Prior to version 9.0.3, a flaw in Dozzle's agent-backed shell endpoints allows a user restricted by label filters for example, label=env=dev to obtain an interactive root shell in out-of-scope containers for example, env=prod on the same agen...