CVE-2026-71518
ilhomjonr/cve-2026-71518Advisory and PoC for an unauthenticated authorization bypass in Typemill media downloads, using path-equivalent URL variants to access…
authentication-authorizationvulnerability-analysisexploitation+3
1
Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
ilhomjonr/cve-2026-71518Advisory and PoC for an unauthenticated authorization bypass in Typemill media downloads, using path-equivalent URL variants to access…
burjoy/cve-2024-40275_scannerScanner for CVE-2024-40725 Apache HTTP Server source-code disclosure; probes direct and subrequest paths, fingerprints affected versions, and outputs…
davkharrr/cve-2026-19478-pocProof-of-concept exploit for unauthenticated remote code injection in GitLab's GraphQL API, using crafted queries to modify or delete public projects…
gitchw/ghostlock-cve-2026-43499CVE-2026-43499 (GhostLock) — Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting Huawei Watch 4 Pro (kernel 5.4.210)
ksotaria1337/cve-2026-19598Minimal Python repository for studying and reproducing a specific CVE, intended for vulnerability validation in controlled environments.
lxxexxbxx/cve-2026-44578Proof-of-concept exploit for CVE-2026-44578 that reproduces the vulnerable condition, enabling security researchers to validate affected systems and…
securifera/cve-2026-20217Reproduces ZendTo unauthenticated ClamAV RCE and root privilege escalation in an authorized lab, with pinned Docker target, fail-closed verification,…
typedefabcd1234ntd/cve-2026-19500-pocProof-of-concept for CVE-2026-19500, a DoS vulnerability in the SureForms WordPress plugin that exhausts server resources via oversized key-value…
typedefabcd1234ntd/cve-2026-19501-pocProof-of-concept for unauthenticated CSV formula injection in SureForms, showing crafted form submissions trigger spreadsheet formulas when exported…
valentineus/hp-slate7-root-kitHP Slate 7 2800 Android 4.1.1 rooting kit using CVE-2015-1805.
boreas37/cve-2025-62593-pocPoC for CVE-2025-62593: unauthenticated RCE in Ray (CISA KEV). Stdlib-only Python.
ac8999/cve-2025-5880PoC for a Path Traversal vulnerability in Whistle v2.9.98 via the /cgi-bin/sessions/get-temp-file endpoint. (Unpatched)
boreas37/cve-2026-44848-pocPoC for CVE-2026-44848: Portainer missing authorization on Docker plugin endpoints -> host RCE (GHSA-rrmm-9v76-h3p4). Stdlib-only Python.
cypherhippie/cve-2026-34486---unauthenticated-rce-via-java-deserializationEncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization.
graysignal/cve-2024-20767-adobe-coldfusionPoC exploit for CVE-2024-20767 in Adobe ColdFusion, leveraging an improper access control flaw to read arbitrary files from affected servers.
graysignal/cve-2024-23897-jenkins-arbitrary-read-file-vulnerabilityUnauthenticated Jenkins CLI exploit scanner for CVE-2024-23897 that detects vulnerable versions and reads arbitrary files from the controller through…
graysignal/cve-2024-24919-check-point-remote-access-vpnScan for and exploit CVE-2024-24919 in Check Point Security Gateways, an unauthenticated arbitrary file read that can expose credentials and lead to…
graysignal/cve-2024-28995-solarwinds-serv-uExploit for CVE-2024-28995 affecting SolarWinds Serv-U 15.4.2 HF 1 and previous versions