CVE-2026-2413
randomrobbiebf/cve-2026-2413Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path
vulnerability-analysisexploitationweb-application-exploitation+1
Penetration testing methodologies, frameworks, reporting, and automation tools.
randomrobbiebf/cve-2026-2413Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path
k3ystr0k3r/cve-2026-39987Proof-of-concept exploit for Marimo pre-authentication RCE. Uses the unauthenticated /terminal/ws WebSocket endpoint to spawn a PTY and establish a…
wattocyber/offensive-one-liners110 offensive security one-liners for authorized testing and CTFs, organized in one markdown notebook by category and kill-chain step. Dual-use…
xghst0/reconkgVulnerability triage with provenance. Resolves CVEs from locally built corpora (NVD/KEV/EPSS, ExploitDB, nmap script.db) and emits verification…
indoushka/context-aware-offensive-intelligenceResearch framework redefining post-exploitation through decision intelligence.
squidsec/bloodbashOffline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…
godliveanton/cve-2026-61241Oracle OID LDAP Server Privileges Management Exploit
l0u7r3/certighostProof-of-concept exploit code for CVE-2026-54121, adapted and edited for validating the vulnerability in affected environments.
k0nnect/halo-cve-2026-67919halo cms plugin 1-request rce from a url, PoC + exploit chain
lanicer/cve-2026-41940-pocExploits cPanel/WHM CVE-2026-41940 authentication bypass via CRLF session injection for unauthenticated root-level WHM access, then lists accounts,…
andreamammano89-maker/cve-2021-42013_821311Exploits Apache HTTP Server CVE-2021-42013 for path traversal and CGI-based remote code execution during penetration testing.
ubaydev/cve-2026-15748Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration
graysignal/apache-ofbiz-auth-bypass-and-rce-exploit-cve-2023-49070-cve-2023-51467This exploit scans whether the provided target is vulnerable to CVE-2023-49070/CVE-2023-51467 and also exploits it depending on the choice of the…
biutrap/cve-2026-64849Proof-of-concept exploit for CVE-2026-64849: triggers SSRF in MLflow webhook API via crafted POST, fetching cloud instance metadata from…
horkimhab/cve-2024-8068-cve-2024-8069Proof-of-concept exploit scripts for CVE-2024-8068 and CVE-2024-8069, focused on authorized penetration testing, educational labs, and defensive…
deadexpl0it/cve-2026-19598-pocProof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9.
superman-l/cve-2026-16723Reproduces fastjson 1.2.83 @JSONType RCE with a vulnerable Spring Boot target and ASM-based payload generator using HTTP or file protocol jar chains.
hackspeak/cve-2026-23479Redis UAF RCE PoC collection for CVE-2026-23479: safe version checker, exploit module, GDB-assisted PoC, and Sigma detection rules for authorized…