cve-2026-0013-exploit
inforcqb-self/cve-2026-0013-exploitProof-of-concept exploit code for CVE-2026-0013, demonstrating the vulnerability for research and validation purposes.
exploitationvulnerability-analysisweb-application-exploitation
1
inforcqb-self/cve-2026-0013-exploitProof-of-concept exploit code for CVE-2026-0013, demonstrating the vulnerability for research and validation purposes.
thejesterrrr/cve-2026-19632Proof-of-concept code and reproduction details for CVE-2026-19632, demonstrating the vulnerability's trigger conditions and impact.
albinowax/activescanplusplusBurp Suite extension that extends active and passive scanning with checks for host header attacks, XXE, expression language injection, shellshock and…
d0ge/xswXML Signature Wrapping Burp Suite Extensions
bombobombone/cve-2026-103442Local proof-of-concept and sanitized report for CVE-2026-103442, a PHP object injection in MediaWiki CentralAuth's merge-session handling that can…
bombobombone/cve-2026-103437Local proof-of-concept and sanitized report for CVE-2026-103437, a canonical URL XSS in MediaWiki ReadingLists triggered via crafted import links.
bombobombone/cve-2026-100381Report and PoC for CVE-2026-100381, a DOM XSS in MediaWiki UploadWizard Flickr collection and set titles, with patch verification notes and a local…
wayang1337/cve-2026-18143Request a Quote for WooCommerce (Addify) <= 2.9.2 Unauthenticated arbitrary file upload via afrfq_submit_quote_via_popup
winrarzipsexploit/cve-2026-48908Python exploit suite for CVE-2026-48908, an unauthenticated ZIP upload RCE in Joomla SP Page Builder (<=6.6.1), with fingerprinting, batch mode, and…
kamalx06/xxeripperBlack-box XXE scanner detecting in-band, error-based, and blind out-of-band injection via statistical baselining, parser fingerprinting, and OOB…
coactionbrittlemaidenhair51/coactionbrittlemaidenhair51.github.ioExplore and validate CVE-2026-42978 PoC with an integrated AI security tool, multi-protocol terminal, and autonomous agent suite for Windows Push…
licitrasimone/cve-2026-75157-pocStandalone authorized universal HTTP PoC for CVE-2026-75157
isaca0315/cve-2026-65013-bola-idorReproducible BOLA/IDOR PoC against Onlook's tRPC API (CVE-2026-65013), with a 12-step exploit chain, vulnerable and patched Docker targets, and…
thoropass-public/area51The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a…
testardou/cve-2026-65540Popup for CF7 with Sweet Alert <= 1.6.5 - Cross-Site Request Forgery
hainhc/cve-2026-73570Proof-of-concept exploit for CVE-2026-73570, an unauthenticated OS command injection in Zimbra Collaboration Suite via zimbra-snmp log injection,…
mufasa-noir/xmlrpc-pingback-vulnerability-pocThis is my own written POC on the xmlrpc-pingback vulnerabiity found on wordpress. CVE-2025-54352.
bombobombone/cve-2026-73314Proof-of-concept exploit for CVE-2026-73314, a PayPal REST webhook signature verification bypass in XenForo before 2.3.13, allowing unauthorized…