Tools

maxprog-svg/cve-2026-68820_mass_exploit

Automated local privilege escalation exploit for Windows 10/11 targeting AFD.sys use-after-free to gain SYSTEM, with PPL bypass and EDR evasion for…

epsilonpoint88-glitch/epsilonpoint-

Modular exploit framework targeting CVE-2026-23550 in WordPress, featuring mass exploitation, obfuscation, post-exploitation, and Docker-based C2…

johenlastgen-jlg/cve-2026-11961

CVE-2026-11961 — UserRegistration: WordPress User Registration <= 5.2.2 Privilege Escalation. Misconfigured Membership Roles → Unauthenticated Admin…

nxploited/cve-2026-1937

YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Options Update via 'yaymail_import_state' AJAX Action

rio128128/mass-cve-2023-28121-kdoec

CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]

sparrowhawk1113/exploit-for-cve-2025-2304

Exploit for CVE-2025-2304

jenderal92/cve-2026-5118

CVE-2026-5118 – Python2 mass exploit for Divi WordPress plugin Unauthenticated administrator registration via admin-ajax.php. Multi‑threaded scanner…

lil0xplorer/cve-2025-2304-poc

PoC for CVE-2025-2304 Privilege Escalation in the Camaleon CMS

whiteov3rflow/cve-2025-2304-poc

Proof-of-concept exploit for CVE-2025-2304, a mass assignment vulnerability in Camaleon CMS < 2.9.1 allowing authenticated privilege escalation to…

the8frust/cve-2025-2304

Exploit for CVE-2025-2304 | Camaleon CMS versions < 2.9.1

csuribird/cve-2025-2304

This Python script exploits a critical mass assignment vulnerability in Camaleon CMS version 2.9.0, allowing any registered user to escalate their…

nxvh1337/cve-2025-15602-poc

Snipe-IT < 8.3.7 Mass Assignment Vulnerability Leading to Privilege Escalation

vivigotnotime/cve-2023-22515-exploit-script

Automated exploit script for CVE-2023-22515 (Confluence privilege escalation) supporting single-target and mass exploitation modes with…

p3nt3st3r-star/cve-2026-8732-poc

Multi-threaded mass scanner for CVE-2026-8732 in WordPress WP Google Map Pro. Automates nonce extraction, token exploitation, and hidden admin…

jeanback1/cve-2025-2304-exploit

Python exploit script for CVE-2025-2304, a mass assignment privilege escalation in Camaleon CMS. Automates CSRF token parsing and role parameter…

im-hanzou/mass-cve-2023-28121

CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]

im-hanzou/msaper

Automatic Mass Tool for check and exploiting vulnerability in CVE-2023-3076 - MStore API < 3.9.9 - Unauthenticated Privilege Escalation (Mass Add…

estebanzarate/cve-2025-2304-camaleon-cms-mass-assignment-privilege-escalation-poc

Proof-of-concept exploit for a mass assignment privilege escalation vulnerability in Camaleon CMS < 2.9.1. Authenticated low-privilege users can…