0xterror/cve-2026-82329-jfrog-artifactory-Exploit PoC for CVE-2026-82329, an authentication bypass in JFrog Artifactory. Demonstrates forging JWT tokens to gain admin access and create a…
pigeonlabshq/pigeonEnforce least-privilege delegation for AI agents with signed, scoped credentials. Grant sub-agents narrow capabilities and resources, verify actions…
0xcyp1337/cve-2026-82329Mass exploit for CVE-2026-82329, an unauthenticated authentication bypass in JFrog Artifactory. Supports single-target and batch scanning with…
hypnguyen1209/cve-2026-63520Exploit chain for unauthenticated RCE on Microsoft SharePoint, combining a JWT authentication bypass with unsafe .NET type instantiation to achieve…
rosemary1337/cve-2026-41940Proof-of-concept exploit for CVE-2026-41940, an unauthenticated authentication bypass in cPanel/WHM using CRLF injection to leak security tokens and…
typeconfused/cve-2026-24061GNU telnetd service from GNU InetUtils authentication-bypass
alihussainzada/cve-2026-29000-python-poc-pac4j-jwt-authenticationbypass-pocPython proof-of-concept demonstrating an authentication bypass in pac4j JWT by crafting a JWE token with an unsigned inner JWT, allowing privilege…
aksalsalimi/cve-2026-26418Documentation of CVE-2026-26418, a missing authentication and authorization vulnerability in TCS Cognix Recon Client v3.0 Web API, including affected…
turkios/cve-2026-32699-facturascripts-nick-bypassBroken Access Control in FacturaScripts EditUser controller allows authenticated users to rename any account (including admin) by modifying the…
simoesctt/sctt-2026-33-0004-forticloud-sso-identity-singularityWhile Fortinet's January 27, 2026 mitigation for **CVE-2026-24858** focuses on blocking specific accounts like `[email protected]`, it fails to…
simoesctt/ctt-refraction-vortex-cve-2026-7731-Exploit for CVE-2026-7731 targeting cloud-native identity gateways by refracting JWT temporal validation to escalate privileges from admin:false to…
maxmnml/smartermail-cve-2026-23760-pocCVE-2026-23760 - An authentication bypass via password reset API in SmarterMail.
galaxy-sc/cve-2026-0920-wordpress-la-studio-exploitProof-of-concept exploit for CVE-2026-0920 in LA-Studio Element Kit, enabling unauthenticated privilege escalation to administrator via crafted AJAX…
crims-on/cve-2026-29000Exploit script for CVE-2026-29000, a JWT authentication bypass in Pac4j, allowing unauthorized access using a public key.
snizi/cve-2026-18963-exploitExploit for Keycloak CVE-2026-18963 enabling unauthenticated account takeover via reset-credentials bypass. Includes safe detection, non-destructive…
0xyur1/cve-2026-41940cPanel/WHM Authentication Bypass (Zero-Day Vulnerability)
panchocosil/cve-2026-65400-pocRead-only PoC for CVE-2026-65400 — macOS Screen Sharing (screensharingd) pre-auth SRP bypass giving root file read. Patched in macOS 26.6.1 / 15.7.9…
sag-asab/cve-2026-19598Custom Content Types and Fields plugin for WordPress
