CVE-2026-85706
brigadeops32/cve-2026-85706Python PoC exploiting CVE-2026-85706, an unauthenticated path traversal and arbitrary file read in GitLab CE/EE via the create-commit endpoint, with…
data-exfiltrationexploitationinformation-gathering+5
brigadeops32/cve-2026-85706Python PoC exploiting CVE-2026-85706, an unauthenticated path traversal and arbitrary file read in GitLab CE/EE via the create-commit endpoint, with…
solivaquaant/cve-2026-85706Proof-of-concept and reproduction lab for CVE-2026-85706, an unauthenticated path-traversal file read in GitLab CE/EE repository commits and files…
ynsmroztas/gitlabsniperSingle-file Python scanner and exploit for CVE-2026-85706, an unauthenticated arbitrary file read in self-managed GitLab CE/EE, with project…
mhtsec/cve-2026-85706Python PoC for CVE-2026-85706, an unauthenticated path traversal in GitLab CE/EE Repository Commits API that leaks arbitrary local files via a…
solivaquaant/cve-2026-85706-pocPoC for CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local file read
squeeze440/zotlit-pocPoC — attachment import copies files from unapproved local paths in ZotLit (GHSA-4qh7-66xv-h329, CVE-2026-87000, CVSS 5.5).
e4zyy/project-cve-2026-45833Exploit tool for CVE-2026-45833 in ChromaDB, enabling malicious model generation, reconnaissance, and data exfiltration from target collections via…
davidrxchester/cve-2026-5530Proof-of-concept exploit for CVE-2026-5530, an SSRF in Ollama's Pull/Push API, enabling internal endpoint enumeration and full response exfiltration…
graysignal/cve-2024-23897-jenkins-arbitrary-read-file-vulnerabilityUnauthenticated Jenkins CLI exploit scanner for CVE-2024-23897 that detects vulnerable versions and reads arbitrary files from the controller through…
0xterror/cve-2023-22047-oracle-peoplesoft-lfiCVE-2023-22047 is a critical unauthenticated Local File Inclusion (LFI) vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit…
abdugafforov-bobur/cve-2026-72550-pocCVE-2026-72550 — Friendica Unauthenticated Stacked-Query SQL Injection PoC (CVSS 9.8 Critical)
1amunvalid/cve-2025-10951Proof-of-concept checker for CVE-2025-10951, an unauthenticated path traversal in ml-logger, validating arbitrary file read via /glob and /stream…
xret2pwn/teamsniperTeamsniper is a tool for fetching keywords in a Microsoft Teams such as (passwords, emails, database, etc.).
seifelsallamy/xssfireA standalone Blind XSS Script.
badsectorlabs/sccm-http-looterFind interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)
george0papasotiriou/cve-2026-21015-php-filter-chain-arbitrary-file-readPoC exploit for CVE-2026-21015 that abuses PHP filter chains to read arbitrary files through a vulnerable include() call, disclosing source and…
majpuv/flowise-arbitrary-file-read-getfilefromstorageUnauthenticated arbitrary file read in Flowise (< 2.2.4) via path traversal in getFileFromStorage (storageUtils.ts). Caused by un-sanitized file path…
error-inside/cve-2025-10897WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read