CVE-2026-31282
saykino/cve-2026-31282Proof-of-concept for CVE-2026-31282: Totara LMS login page access control bypass enabling unauthenticated brute-force credential attacks. Includes…
authenticationeducationmisconfiguration+3
saykino/cve-2026-31282Proof-of-concept for CVE-2026-31282: Totara LMS login page access control bypass enabling unauthenticated brute-force credential attacks. Includes…
mda1r/cve-2026-31278CVE write-up for Active Directory credential exposure vulnerability in Suprema BioStar 2
zvckster/cve-2025-63353Multi-language PoC (Python · Go · JS · C) and technical documentation for CVE-2025-63353, a critical predictable-default-PSK vulnerability in…
suriyaboon/hackthebox-factsHTB Facts is a Easy Linux box featuring Camaleon CMS and MinIO. Gain admin access via open registration and a mass assignment vulnerability, then…
anonymous121029034720384234234/py-network-scannerAdvanced network penetration testing toolkit with SSH vulnerability assessment, CVE-2018-15473 exploitation, stealth brute force capabilities, and…
cesarbtakeda/windows-explorer-cve-2025-24071PoC exploit for CVE-2025-24071, a Windows File Explorer spoofing vulnerability that leaks NTLM hashes via malicious .library-ms files in RAR/ZIP…
azurejoga/cve-2025-26326Critical security vulnerability in NVDA remote connection add-ons.
fernandobortotti/cve-2024-24919Automated exploit for CVE-2024-24919 with API-based vulnerable IP discovery and LFI brute-force using custom wordlists. Designed for educational…
artemcyberlab/project-project-chimera-exploiting-a-modern-wordpress-xxe-to-pillage-secrets-The objective is to conduct a full-scale security assessment of a WordPress-based web application, culminating in a complete server compromise. The…
tr33-he11/winboxpocProof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)
inflixim4be/cve-2020-15392Proof-of-concept exploit for user enumeration vulnerability in Supravizio BPM 10.1.2 via password recovery response differences, enabling brute force…
hackingyseguridad/smbShell script collection for SMB protocol auditing, vulnerability detection (EternalBlue, SMBGhost), null session enumeration, credential brute-force,…
emad-almousa/cve-2023-22074Proof-of-concept exploit for CVE-2023-22074, an Oracle Database Sharding component vulnerability enabling password hash exposure in versions 19c,…
redfox-security/digisol-dg-gr1321-s-password-storage-in-plaintext-cve-2024-4232Proof-of-concept demonstrating plaintext password storage vulnerability in Digisol DG-GR1321 routers, enabling credential exposure and unauthorized…
chinayozz/cve-2020-25078Batch exploit script for CVE-2020-25078 targeting D-Link DCS series cameras to extract account credentials via information disclosure vulnerability.
st0pl/dvrfaultnet.NET console application that exploits CVE-2018-9995 vulnerability
basucert/winboxpocProof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)
xaitax/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerabilityMicrosoft-Outlook-Remote-Code-Execution-Vulnerability