Tools

ermensonx/sudotimewarp-cve-2026-96512-

Reproduction and PoC scripts for CVE-2026-96512 (SudoTimeWarp), where the caller's TZ shifts sudoers NOTBEFORE/NOTAFTER windows, plus mitigation…

d154573r-4v3r73d/cve-2024-47875

Repository dedicated to CVE-2024-47875, providing proof-of-concept material and analysis for this specific vulnerability.

norrig/cve-2021-41773-exploiter

School project - Please use other repos for actual testing

lamaper/cve-2026-52200

Security advisory detailing broken access control in UZ801/ES-U3TS MifiService web API, allowing unauthenticated data extraction, config…

l0lsec/check-cve-2026-3055-netscaler

Low-impact probe for Citrix NetScaler CVE-2026-3055 (SAML IdP memory overread)

dorianhhuc/cve-2026-31431

Ansible playbook for testing CVE-2026-31431, automating vulnerability verification and configuration auditing in production environments.

diogolourencodev/middleforce

Simple script to attempt a Bypass on a server possibly vulnerable to CVE-2025-29927 (Next.js Middleware)

vimashdilshara/-cve-2026-1657

Exploit for CVE-2026-1657, an unauthenticated image upload vulnerability via the 'ep_upload_file_media' AJAX endpoint, allowing remote file upload.

null200ok/cve-2026-22730-scanner

Scanner and exploit tool for CVE-2026-22730, a SQL injection in Spring AI's MariaDB vector store. Supports time-based detection, GET/POST methods,…

mothra-1/cve-2026-31844

Authenticated SQL injection scanner for Koha Library Management System (CVE-2026-31844) using boolean-based blind technique to verify vulnerability…

f4s1on/cve-2026-39363

Batch vulnerability scanner for CVE-2026-39363 in Vite dev server, exploiting WebSocket origin validation bypass to read arbitrary files via…

iniivan13/cve-2026-1107

Nuclei template for detecting CVE-2026-1107 in EyouCMS, exploiting path traversal in check_userinfo to read arbitrary files and potentially achieve…

murrez/cve-2026-0740

Exploit script for CVE-2026-0740 targeting Ninja Forms file upload endpoints to upload a PHP shell, scanning a list of URLs and logging successful…

gagaltotal/cve-2026-43284-cve-2026-43500-scan

Automated SSH-based scanner and patcher for Linux kernel LPE vulnerabilities CVE-2026-43284 and CVE-2026-43500, with multi-host discovery, privilege…

0xgh057r3c0n/cve-2026-3844

WordPress - Breeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload

nvicloud/cve-2026-12352

Proof-of-concept for CVE-2026-12352, an authentication bypass in Digi PortServer TS that discloses device configuration including plaintext RADIUS…

baba01hacker666/cve-2026-33032

Python proof-of-concept for CVE-2026-33032 that inspects nginx status and configs, then demonstrates unauthorized config write with reload to deploy…

legendile7/cve-2026-78122-poc

Proof-of-concept exploit for CVE-2026-78122, demonstrating container filesystem and environment variable exfiltration through docker-socket-proxy's…