openmeetings-wb-fileid-idor
abraxas/openmeetings-wb-fileid-idorApache OpenMeetings 9.1.0 - High - Remote - IDOR - WHITEBOARD fileId plant then room file resource serves bytes
exploitationinformation-gatheringlabs-practice+4
abraxas/openmeetings-wb-fileid-idorApache OpenMeetings 9.1.0 - High - Remote - IDOR - WHITEBOARD fileId plant then room file resource serves bytes
biitts/cve-2026-72001-pangolin-cross-org-auth-bypassPoC for CVE-2026-72001 — Pangolin < 1.22.0 cross-organization resource authentication bypass via the share-link access-token endpoint (CWE-639, CVSS…
kalnux/cve-2026-1961-foreman-pocPoC for CVE-2026-1961 — command injection in Foreman's WebSocket proxy (lib/ws_proxy.rb) via unsanitized compute resource hostname, leading to RCE as…
saykino/cve-2025-56223Documentation of CVE-2025-56223, a denial-of-service vulnerability in Ascertia SigningHub's Upload Document API, allowing unrestricted file uploads…
kirubel-cve/cve-2026-36957Proof-of-concept for CVE-2026-36957, a denial-of-service vulnerability in Dbit Router firmware via HTTP flood on the Boa web server, causing resource…
b0b0haha/cve-2026-29954Proof-of-concept demonstrating SSRF and HTTP header injection in KubePlus ResourceComposition, enabling cloud metadata access and IAM credential…
graysignal/apache-ofbiz-auth-bypass-and-rce-exploit-cve-2023-49070-cve-2023-51467This exploit scans whether the provided target is vulnerable to CVE-2023-49070/CVE-2023-51467 and also exploits it depending on the choice of the…
bittentech/bug-bounty-beginner-roadmapThis is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.
ronamosa/cve-2026-18953PoC for CVE-2026-18953 — arbitrary file write (CWE-22) in awslabs.aws-transform-mcp-server's get_resource tool via the savePath parameter
zapstiko/bug-bountyHere Are Some Bug Bounty Resource From Twitter
mdkaif302/secarchive🥷 SecArchive - Cybersecurity Resource Collection A curated archive of high-quality resources for learning cybersecurity, bug bounty, ethical…
cc1a2b/jshunterjshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive…
far00t01/cve-2026-59941Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps
ianxtianxt/bypass360mimikatz_x64Modified mimikatz binary with resource modification and digital signature to evade 360 Antivirus detection for credential dumping in penetration…
bishopfox/cirro-azcli-extAzure CLI extension for Cirro collection
horkimhab/cve-2026-33718Proof-of-concept exploit for CVE-2026-33718 demonstrating command injection in OpenHands' Git Diff Handler. Educational resource for vulnerability…
dinosn/fastjson-jsontype-rce-labDocker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2…
nu11secur1ty/xssightEducational resource on Cross-site Scripting (XSS) attack techniques, covering non-persistent, persistent, and DOM-based vectors with practical…