CVE-2026-28134
randomrobbiebf/cve-2026-28134JetEngine <= 3.7.2 - Authenticated (Contributor+) Remote Code Execution
vulnerability-analysisexploitationweb-application-exploitation+1
Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
randomrobbiebf/cve-2026-28134JetEngine <= 3.7.2 - Authenticated (Contributor+) Remote Code Execution
randomrobbiebf/cve-2025-67923JetEngine <= 3.7.7 — Unauthenticated Stored Cross-Site Scripting via CCT REST API
randomrobbiebf/cve-2026-2413Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path
k3ystr0k3r/cve-2026-39987Proof-of-concept exploit for Marimo pre-authentication RCE. Uses the unauthenticated /terminal/ws WebSocket endpoint to spawn a PTY and establish a…
trustsig-eu/wasm2c-tableflipwasm2c sandbox escape. An untrusted WebAssembly module breaks out of the generated C sandbox and executes an arbitrary shell command on the host.
1rhino2/fnprintmatch functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.
xghst0/reconkgVulnerability triage with provenance. Resolves CVEs from locally built corpora (NVD/KEV/EPSS, ExploitDB, nmap script.db) and emits verification…
indoushka/context-aware-offensive-intelligenceResearch framework redefining post-exploitation through decision intelligence.
squidsec/bloodbashOffline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…
zaydmulani09/sentrymcpA static + runtime security scanner for MCP (Model Context Protocol) servers
p4x1s/ansible-cve-2023-36845Ansible Playbook for CVE-2023-36845(Juniper Networks Junos OS 远程代码执行漏洞)
l0u7r3/certighostProof-of-concept exploit code for CVE-2026-54121, adapted and edited for validating the vulnerability in affected environments.
lanicer/cve-2026-41940-pocExploits cPanel/WHM CVE-2026-41940 authentication bypass via CRLF session injection for unauthenticated root-level WHM access, then lists accounts,…
andreamammano89-maker/cve-2021-42013_821311Exploits Apache HTTP Server CVE-2021-42013 for path traversal and CGI-based remote code execution during penetration testing.
ubaydev/cve-2026-15748Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration
zavisco/cve-2026-64849.yamlDetects unauthenticated MLflow webhook SSRF (CVE-2026-64849) that accesses internal or cloud metadata services and leaks response details via…
graysignal/apache-ofbiz-auth-bypass-and-rce-exploit-cve-2023-49070-cve-2023-51467This exploit scans whether the provided target is vulnerable to CVE-2023-49070/CVE-2023-51467 and also exploits it depending on the choice of the…
0xbinder/cve_2019_2215Proof-of-concept LPE exploit for Android Binder UAF that uses iovec spraying and addr_limit overwrite to achieve arbitrary kernel read/write.