CVE-2026-26012
diegobaelen/cve-2026-26012Proof-of-concept exploit for CVE-2026-26012, demonstrating an authenticated organization collection permissions bypass and cipher enumeration in…
api-security-testingexploitationinformation-gathering+3
diegobaelen/cve-2026-26012Proof-of-concept exploit for CVE-2026-26012, demonstrating an authenticated organization collection permissions bypass and cipher enumeration in…
mxm0z/r2sA web-based vulnerability scanner for CVE-2025-55182, a critical Remote Code Execution (RCE) vulnerability in React Server Components.
filipegaudard/cve-2026-30944-pocPython proof-of-concept for CVE-2026-30944, exploiting a BOLA vulnerability in StudioCMS to escalate privileges via insecure API token generation.
jfriedli/cve-2025-11771Proof-of-concept exploit for CVE-2025-11771 demonstrating unauthenticated sale record creation via a WordPress REST API endpoint, with browser…
d0n601/cve-2025-12720g-FFL Cockpit <= 1.7.1 - Improper Authorization to Unauthenticated Product Deletion
filipegaudard/cve-2026-24134-pocProof-of-concept exploit for CVE-2026-24134, a Broken Object Level Authorization vulnerability in StudioCMS, demonstrating unauthorized access to…
jfriedli/cve-2025-6783Proof-of-concept exploit for CVE-2025-6783 demonstrating SQL injection via crafted HTTP headers and JSON payload against WordPress GoZen Forms REST…
jfriedli/cve-2025-6792Proof-of-concept exploit for CVE-2025-6792 demonstrating unauthorized Pusher channel subscription and event eavesdropping in a WordPress plugin via…
fuyuooumi1027/cve-2023-45857-demoInteractive demo for CVE-2023-45857 (axios XSRF token bypass). Step-by-step guide to reproduce the vulnerability in a controlled dev container…
prestonhashworth/cve-2025-55182CVE-2025-55182 testing toolkit with Postman collection, cURL examples, and F5 WAF signature validation for vulnerability assessment and protection…
adelittle/cve-2021-4191_exploitsExploit script for CVE-2021-4191 that enumerates GitLab users via the GraphQL API, useful for security assessments and validating exposure.
clemfavre/cve-2023-45612_exploitReproduction of a high severty security problem that allows XXE (XML eXternal Entity) attacks on Ktor's XML serialization.
0xsu3ks/cve-2025-29556PoC for CVE-2025-29556 creating Security Officer accounts on ExaGrid EX10 backup appliances via a low-privilege API session, enabling privilege…
crackercat/cve-2022-24112Apache APISIX apisix/batch-requests RCE
skysliently/cve-2022-22947-pb-ai一个由AI生成的漏洞验证应用
shoucheng3/perwendel__spark_cve-2016-9177_2-5-1Exploit for CVE-2016-9177 targeting Spark Java web framework, demonstrating directory traversal vulnerability in version 2.5.1 for security testing…
secsys-fdu/cve-2025-51862Demonstrates an IDOR vulnerability in TelegAI's chat API allowing unauthorized conversation tampering, leading to phishing and XSS-based account…
ashiqrehan-21/mcp-inspector-cve-2025-49596MCP-Inspector-vulncheck is a Python script that checks if an MCP Inspector server is vulnerable to CVE-2025-49596. It tests whether the /sse endpoint…