Tools

jra89/cve-2019-19651

Chevereto reflected XSS in Website Name - 1.0.0 - 1.1.4 Free, <= 3.13.5 Core

eaea0001/servu-cve-2026-28318-poc

SolarWinds Serv-U CVE-2026-28318: unauthenticated Content-Encoding: deflate crash. Root-cause analysis (invalid free of an interior pointer -> heap…

polosss/by-poloss..-..cve-2026-12432-poc

WP Full Stripe Free <= 8.4.3 - Missing Authorization

jra89/cve-2019-19511

Chevereto - 1.0.0 Free - 1.1.4 Free, 3.13.4 Core, Remote Code Execution

nxploited/cve-2024-6132

Pexels: Free Stock Photos <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload

randomrobbiebf/cve-2023-6700

Cookie Information | Free GDPR Consent Solution <= 2.0.22 - Authenticated (Subscriber+) Arbitrary Options Update

nikip72/cve-2021-39273-cve-2021-39274

Two security issues identified in Sn1per v9.0 free version by XeroSecurity

iveresk/cve-2022-21907-http.sys

An unauthenticated attacker can send an HTTP request with an "Accept-Encoding" HTTP request header triggering a double free in the unknown…

zeronohacker/cve-2019-9766

Free MP3 CD Ripper 2.6 版本中存在栈缓冲区溢出漏洞 (CVE-2019-9766)，远程攻击者可借助特制的 .mp3 文件利用该漏洞执行任意代码。

cappricio-securities/cve-2024-0235

EventON (Free < 2.2.8, Premium < 4.5.5) - Information Disclosure

jra89/cve-2019-19658

Chevereto stored XSS in profile page - 1.0.0 - 1.1.4 Free, <= 3.13.5 Core

jra89/cve-2019-19652

Chevereto downgrade attack - 1.0.0 - 1.1.4 Free, <= 3.13.5 Core

randomrobbiebf/cve-2024-52433

My Geo Posts Free <= 1.2 - Unauthenticated PHP Object Injection

christophetd/cloudflair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

epsylon/ufonet

UFONet - Denial of Service Toolkit

moham3driahi/xattacker

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

malfunkt/hyperfox

HTTP/HTTPS MITM proxy and recorder.

peterferrie/win-exec-calc-shellcode

A small, null-free Windows shellcode that executes calc.exe (x86/x64, all OS/SPs)