Exploitation

yohannslm/cve-2026-23869

Proof-of-concept exploit for CVE-2026-23869, a denial-of-service vulnerability in React Server Components allowing unauthenticated CPU exhaustion via…

yawataa/cve-2025-60749

SketchUp Desktop 2025 DLL Hijacking Vulnerability

ynsmroztas/fortisandbox-rce-exploit-cve-2026-39808

Unauthenticated RCE scanner for FortiSandbox CVE-2026-39808 with canary-based verification, command execution, and pipeline integration for mass…

yasirr10/cve-2026-29000

Exploit for CVE-2026-29000, an authentication bypass in pac4j-jwt allowing attackers to forge admin tokens using only the public key.

yasindce1998/grafana-cve-2021-43798

This repository contains files for reproducing the vulnerability.

yallasec/cve-2026-21627---tassos-novarain-framework-plg_system_nrframework-exploit---joomla

Python exploit for CVE-2026-21627, an unauthenticated arbitrary PHP file inclusion in Joomla's Novarain Framework, enabling file upload, delete, and…

yahiahamza/cve-2026-5027

Proof-of-concept exploit for CVE-2026-5027, a path traversal vulnerability in Langflow leading to unauthenticated remote code execution via cron job…

yahiahamza/cve-2026-25099

Python exploit for Bludit CMS API unrestricted file upload leading to remote code execution, providing command execution and interactive shell for…

yadhukrishnam/cve-2026-25053

Vulnerabilities in the Git node allowed authenticated users with permission to create or modify workflows to execute arbitrary system commands or…

y-security/ylog4j

PortSwigger Burp Plugin for the Log4j (CVE-2021-44228)

xiju2003/-cve-2021-45232

The vulnerability affects Apache APISIX Dashboard version 2.10.1

xshadow-here/cve-2026-0740

Automated mass exploiter for CVE-2026-0740, an unauthenticated arbitrary file upload in Ninja Forms File Uploads plugin, enabling remote code…

xal6/cve-2026-64638-banner-poc

Generates a self-submitting HTML trigger page that exploits a reflected HTML injection in WordPress login (CVE-2026-64638) to display a custom…

x41sec/cve-2021-34600

Proof-of-concept exploit for CVE-2021-34600, demonstrating a key generation vulnerability in Telenot access control systems using Proxmark3 RFID…

x04000/cve-2021-4034

Pre-built PWNKIT exploit for CVE-2021-4034, a local privilege escalation vulnerability, providing a ready-to-use payload for educational testing.

x04000/autopwnkit

A tool to automate the exploit PWNKIT (CVE-2021-4034)

wongwaituck/cve-2021-4034

Proof-of-concept exploit for CVE-2021-4034 (PwnKit) that escalates privileges to root on vulnerable Linux systems.