PenKit51

The open-source AI penetration testing platform with 63 deep exp...

Exploit for Deserialization of Untrusted Data in Apache Camel

camel-consul ConsulRegistry Deserialization Vulnerability Repr...

lab-security-exploitable

No d...

owasp-juiceshop-assessment

OWASP Juice Shop — Web Application Security Assessment A hand...

Exploit for OS Command Injection in Openbsd Openssh

No d...

Browser-exploitation-lab

Browser Exploitation Lab A comprehensive, industry-ready web...

Exploit for CVE-2026-25555

CVE-2026-2555...

-DeepSeek-RagFlow-Docker-

-DeepSeek-RagFlow-Docker- Rep...

Exploit for CVE-2026-9290

CVE-2026-9290 — WP User Manager LFI to RCE Exploit Pre-Auth Path...

Exploit for CVE-2026-8713

CVE-2026-8713 — Avada Fusion Builder WordPress Exploit Pre-Aut...

Exploit for Unrestricted Upload of File with Dangerous Type in Joomlic Icagenda

CVE-2026-48939 — iCagenda Joomla RCE Exploit Pre-Auth Arbitrary...

Exploit for Memory Allocation with Excessive Size Value in Apache Http_Server

HTTP/2 Bomb - CVE-2026-49975 A denial-of-service DoS proof...

libextractor-ole2-rce

Stack-Based Buffer Overflow in GNU libextractor ≤ 1.14 OLE2 P...

Exploit for Code Injection in Langflow

CVE-2026-27966 — Langflow Remote Code Execution Scanner Pre-Auth...

Exploit for CVE-2018-10933

C...

Exploit for CVE-2026-14628

Path Traversal Demo - Case Study : CVE-2026-14628 A minimal,...

Exploit for CVE-2026-22874

CVE-2026-22874 — Gitea SSRF PoC ⚠️ DISCLAIMER: Este PoC...

pi-xpi

XPI Security tools for Pi Agent: casefile tracking, web searc...

Exploit for OS Command Injection in Gnu Bash

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bu...

Exploit for CVE-2026-20896

CVE-2026-20896 Gitea's official Docker image up to and inclu...

Exploit for CVE-2026-10104

CVE-2026-10104: Stored Cross-Site Scripting in Product Video G...

Exploit for Unrestricted Upload of File with Dangerous Type in Ollyo Sp_Page_Builder

CVE-2026-48908 — SP Page Builder Joomla Unauthenticated RCE...

Exploit for Improper Access Control in Ollyo Helix3

-CVE-2026-49049-Helix3-Expl...

Exploit for CVE-2025-59382

CVE-2025-59382: QNAP Password Reset to Account Takeover Unaut...

VDT

Vulnerability Discovery Training VDT Training data for adva...

Exploit for Missing Authentication for Critical Function in Nginxui Nginx_Ui

🚀 CVE-2026-27944: Nginx UI Unauthenticated Backup Exploit 📌 D...

Exploit for Cross-site Scripting in Automattic Akismet

CVE-2015-9357 wordpress smiley/emoticon parser stored xss, ad...

Exploit for CVE-2026-23550

██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ███...

DTI_APIM

No d...

Exploit for CVE-2026-39047

No d...

Exploit for Observable Discrepancy in Intel Atom_C

🛡️ Spectre Variant 2 CVE-2017-5715 — Hardware Vulnerability...

scripts

Guía de Estructura de Scripts — PternaSec/scripts Este reposi...

Exploit for CVE-2026-54998

CVE-202...

OIBSIP_Cybersecurity_Task9

Task 9: SQL Injection Vulnerability Assessment using DVWA...

Exploit for Eval Injection in Langflow

Fireflow RCE Exploit Remote Code Execution for Langflow via t...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

No d...

js-deep-analyzer

No d...

Exploit for Improper Access Control in Ollyo Helix3

CVE-2026-49049 — Helix3 Joomla Plugin JoomShaper Unauthenticat...

PoCHarness

...

Exploit for CVE-2026-57517

Control Web Panel 0.9.8.1224 — Blind SQL Injection to Remot...

Exploit-Chain-Suggester

Exploit Chain Suggester v2.0.0 A CLI tool for penetration tes...

Exploit-Chain-Suggestor

Exploit Chain Suggestor A CLI tool for penetration testers an...

cssfontface_lapse

CSSFontFace WebKit Exploit & Lapse Kernel Exploit for PS4 Fork o...

Exploit for Eval Injection in Langflow

No d...

Exploit for CVE-2026-54415

CVE-2026-54415 — Azuriom CMS Broken Access Control → Account T...

payliteng-pentest-portfolio

No d...

SQL-Injection-on-DVWA-OASIS-TASK-03

SQL Injection on DVWA Low Security Objective The object...

exploit-mapper

No d...

Exploit for CVE-2026-23869

How to Fix CVE-2026-23869: Mitigate React Server Component Loo...

Exploit for Improper Input Validation in Apache Activemq

Apache ActiveMQ Classic — RCE Research Private research archi...