wsuks
neffisback/wsuksAutomated WSUS MITM tool that spoofs Windows Update traffic over ARP, serves a signed executable with PowerShell payload, and escalates to local…
exploitationmisconfigurationnetwork-security+5
403
neffisback/wsuksAutomated WSUS MITM tool that spoofs Windows Update traffic over ARP, serves a signed executable with PowerShell payload, and escalates to local…
cyb3rwitch3r/cve-2026-26119Authenticated remote code execution exploit for Windows Admin Center via WinREST/PowerShell invokeCommand; takes credentials and runs arbitrary…
jonaslejon/ad-autopwnAutomated Active Directory attack chain from zero-auth to Domain Admin. Chains 25+ techniques including Kerberoast, AD CS ESC1-16, Shadow…
0xdak/cve-2026-59243_exploitExploit for Apache Airflow FAB OAuth authentication bypass (CVE-2026-59243) that achieves admin access and remote code execution by triggering a…
zer0dayf/cve-2026-15013Exploit for CVE-2026-15013: unauthenticated SAML auth bypass via algorithm confusion. Forges SAML responses to gain admin access and deploy…
tc4dy/cve-2026-60206-poc-exploitMulti-vector exploit framework for CVE-2026-60206 targeting Oracle WebLogic Server SAML authentication bypass, with mass scanning, safe detection,…
razureink/cve-2026-41940-cpanel_authbypass_reproductionReproduction of CVE-2026-41940, a critical authentication bypass in cPanel & WHM. Provides a proof-of-concept exploit to forge session tokens and…
gagaltotal/cve-2026-63030-cve-2026-60137-wp2shell-pocProof-of-concept exploit for WordPress REST API time-based blind SQL injection (CVE-2026-63030, CVE-2026-60137) with full chain escalation to remote…
squamity/cve-2026-8181-pocPython PoC for CVE-2026-8181, a critical authentication bypass in Burst Statistics WordPress plugin. Includes exploit automation, bulk scanning, and…
administrator-01001/cve-2026-63030Proof-of-concept exploit for CVE-2026-63030 chaining REST API route confusion, SQL injection, oEmbed cache poisoning, and Customizer privilege…
4b3r4m4-607d/cve-2026-63030-pocUnauthenticated WordPress RCE exploit chain chaining route confusion (CVE-2026-63030) with SQL injection (CVE-2026-60137) to create an admin account…
m2hcz/cve-2025-6440-poc-exploitUnauthenticated remote code execution exploit for the WC Designer Pro WordPress plugin. Automates detection, file upload, and shell access via a…
ch4120n/cve-2026-55579Python exploit for CVE-2026-55579, an unauthenticated RCE in Pheditor via hardcoded default credentials. Executes commands and uploads files through…
sentinel-aidefense/cve-2026-56164-expUnauthenticated privilege escalation exploit for Microsoft SharePoint Server (CVE-2026-56164). Escalates from anonymous to Site Collection…
1beelze/cve-2026-5118Automated exploit and mass scanner for CVE-2026-5118, an unauthenticated privilege escalation in WordPress Divi Form Builder <=5.1.2, enabling admin…
b0nyo/poc-cve-2026-38526Exploit for CVE-2026-38526 targeting Krayin CRM's unrestricted file upload. Uploads PHP webshell for remote command execution via admin credentials.
ly1g3/packetfence-cve-2024-39024In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution
nomaisthere/cve-2023-4861-pocAuthenticated remote code execution exploit for CVE-2023-4861 in WordPress Filester plugin. Automates file upload, webshell deployment, and command…