Design-and-Evaluation-of-an-MCP-Governed-Pentest-Agent

Design-and-Evaluation-of-an-MCP-Governed-Pentest-Agent Dissert...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...

npm_poisoning_poc

Guardians 2027 AI package lab Reusable setup for the first Gu...

Exploit for OS Command Injection in Totolink N600R_Firmware

CVE-2022-28906 PoC Python proof of concept for unauthenticate...

Exploit for CVE-2026-18963

CVE-2026-18963 — Keycloak Unauthenticated Account Takeover...

PoC-Pods-Unauthenticated-Privilege-Escalation

PoC-Pods-Unauthenticated-Privilege-Escalation A cr...

Exploit for Numeric Truncation Error in Fortinet Fortios

CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remo...

Exploit for CVE-2026-16348

CVE-2026-16348 TP-Link Archer BE800 V1 — Authenticated RCE v...

Exploit for CVE-2026-15469

CVE-2026-15469 — Hard-coded Mesh Group Private Key in TP-Link...

Exploit for CVE-2026-18963

CVE-2026-18963 Keycloak reset-credentials bypass → unauthent...

Exploit for CVE-2026-18963

CVE-2026-18963 — Lab tái dựng lại Keycloak reset-credentials...

Exploit for CVE-2026-18963

CVE-2026-18963 Keycloak reset-credentials bypass → unauthenti...

Qinglong-Combo-Exploit

🐉 Qinglong Combo Exploit Qinglong Panel Three Vulnerabili...

cyber-apocalypse-2026-salt-crown

Cyber Apocalypse CTF 2026: The Salt Crown — Writeups Writeups...

Exploit for CVE-2026-32475

CVE-2026-32475 — Elementor Pro Unauthenticated Arbitrary File...

Exploit for Improper Isolation or Compartmentalization in Mozilla Firefox

CVE-2026-12295 — srcdoc data on a non-about:srcdoc URI Firefo...

Exploit for CVE-2026-18963

CVE-2026-18963 — Keycloak Reset-Credentials Bypass → Account T...

Exploit for Improper Privilege Management in Mozilla Firefox

CVE-2026-74939 — Firefox content→parent privilege escalation...

Acelle-Mail-4.0.24-Unauthenticated-Path-Traversal-to-RCE-Chain

Acelle Mail Note: The path traversal alone Step 1 is su...

Exploit for Improper Restriction of Excessive Authentication Attempts in Dani-Garcia Vaultwarden

CVE-2026-43914 — Vaultwarden Email-2FA Brute-Force Protection...

Exploit for Use After Free in Microsoft

Explotación de Vulnerabilidad BlueKeep CVE-2019-0708 en Ento...

Exploit for Path Traversal in Alfasado Powercms

PoC-fo...

V8-sandbox-escape-PoC-

V8 Sandbox Escape PoC ⚠️ CRITICAL SECURITY WARNING ⚠️...

Exploit for CVE-2026-63039

CVE-2026-63039 — Apache InLong AuditAlertRule ORDER BY SQL i...

Exploit for Command Injection in Apache Ranger

CVE-2026-28672 — Apache Ranger UnixUserGroupBuilder OS comma...

Exploit for CVE-2026-78329

CVE-2026-78329 — camel-undertow header filter strategy not app...

Exploit for CVE-2026-71300

CVE-2026-71300 — camel-atmosphere-websocket dispatch header in...

Exploit for CVE-2026-60093

CVE-2026-60093 — camel-azure-storage-datalake downloadToFile...

waf-requests

wafrequests Educational drop-in replacement for requests d...

Exploit for CVE-2026-66906

CVE-2026-66906 — camel-azure-storage-blob downloadBlobToFile...

Exploit for CVE-2026-66907

CVE-2026-66907 — camel-google-storage downloadFileName path...

Exploit for CVE-2026-66908

CVE-2026-66908 — camel-platform-http-main JWT iss/aud not...

Exploit for Use After Free in Microsoft

CVE-2026-68820: Windows WinSock afd.sys UAF - Mitigation & D...

Exploit for CVE-2026-63621

CVE-2026-63621 — camel-knative structured CloudEvent header in...

Exploit for CVE-2026-59230

CVE-2026-59230 — camel-mail MimeMultipart header injection...

tplink-archer-root-exploit

TP-Link Archer AX73 / AX10 — Root Shell Exploit Auto-Mail L...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Ivanti Standalone_Sentry

CVE-2026-10520 and CVE-2026-10523 An Ivanti Sentry Authentica...

Exploit for CVE-2026-18963

POC-CVE-20...

Exploit for Eval Injection in Tenable Security_Center

C...

recon-cockpit

ReconCockpit A desktop cockpit that turns a penetration-testi...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 CVE-2026-73570 PoC Morehttps://...

Exploit for OS Command Injection in Tenable Security_Center

C...

Exploit for Improper Input Validation in Linux Linux_Kernel

CVE-2018-5803 Lab for testi...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — OnePlus Locked Bootloader Jailbreak Kernel exploi...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 — GhostLock on Huawei Nova 9 NAM-AL00 Securi...

Exploit for Integer Overflow or Wraparound in Google Android

CVE-2025-48595 — Android Framework Integer Overflow Vulnerabil...

leash-poc

leash-poc: MCP tool-poisoning, contained by an independent pol...

Exploit for Deserialization of Untrusted Data in Facebook React

Next.js React Server Components RCE Exploit Exploits CVE-2025...

Exploit for Race Condition in Linux Linux_Kernel

CVE-2022-2590, Dirty COW restricted to shmem linux kernel ver...

Exploit for CVE-2024-66001

Patch: CVE-2024-66001 Vulnerability Details - CVE: CVE...