Log4ShellAuditor
c00ln3t/log4shellauditorAn autonomous reflective Go agent for full-cycle security auditing, WAF evasion, OOB LDAP verification, self-remediation (auto-patching), and…
vulnerability-scannerspayload-generationport-scanning+6
1
Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
c00ln3t/log4shellauditorAn autonomous reflective Go agent for full-cycle security auditing, WAF evasion, OOB LDAP verification, self-remediation (auto-patching), and…
hereticl1nk/eits-portal-exploit-cve-2026-31367-pocPoC exploit for unauthenticated RCE in EITS Admin Dashboard v2.4.0 via command injection in /api/v1/debug, allowing arbitrary OS command execution on…
vognik/cve-2026-26980Unauthenticated SQL injection exploit for Ghost CMS Content API (CVE-2026-26980); dumps database tables from SQLite/MySQL with active/passive checks…
cyberauth/cve-2026-20079Implements the CVE-2026-20079 authentication-bypass-to-root-RCE chain against Cisco Secure FMC using fingerprint, check, proof, and interactive…
biutrap/cve-2026-59310Proof-of-concept exploit for CVE-2026-59310, demonstrating remote path traversal via crafted syslog messages to write arbitrary log files on VMware…
nel-droid/cve-2026-71203-pocPoC: changedetection.io unauthenticated OpenAPI schema disclosure (CVE-2026-71203, Medium 5.3)
nel-droid/cve-2026-71204-pocPoC: changedetection.io settings blind-merge mass assignment (CVE-2026-71204, Medium 6.3)
nel-droid/cve-2026-71205-pocPoC: changedetection.io unlimited login brute-force, no rate limiting (CVE-2026-71205, Medium 6.5)
nel-droid/cve-2026-71206-pocPoC: Shiori JWT CheckToken never re-validates account state (CVE-2026-71206, High 8.2)
nel-droid/cve-2026-72585-pocPoC: Grafana Editor role deletes protected contact points (CVE-2026-72585, Medium 6.5)
phanhoangkhang/react2shellIsolated Docker lab and static scanner for CVE-2025-55182, with vulnerable/patched Next.js builds and PoC validation of RSC Flight deserialization.
aleewyy/cve-2025-49132Minimal proof-of-concept exploit for CVE-2025-49132 in Pterodactyl panels; reads PHP files to extract database credentials and enable unauthorized…
defineid/palimpsestCVE-2026-74945 · Uninitialized heap disclosure via a crafted web font (sec-high)
defineid/revenantCVE-2026-74943 · Use after free in Firefox RasterImage (sec-high)
defineid/skeletonkeyCVE-2026-6765 · Test only FormAutofill handlers exposed in Firefox
kaiisyms/cve-2025-24071Microsoft Windows File Explorer Spoofing Vulnerability / NTLM Hash Leak
defineid/trespasserCVE-2026-74970 · Fission site isolation bypass in Firefox WebRender
defineid/wildfireCVE-2026-39154 · Stored XSS in CometChat JS SDK