Tools

maxprog-svg/cve-2026-83548

Single-file Python tool that fingerprints SonicWall SMA1000 Work Place appliances, probes and confirms the pre-auth SSRF (CVE-2026-83548) via…

cybersecurity/cve-2026-93489

Proof-of-concept for an ASUS router authentication bypass and remote code execution flaw affecting roughly 94 WiFi 6 and newer models, with…

codingranjith/hackingtoolkit

ALL IN ONE Hacking Tool For Hackers, Penetration Tester and Cybersecurity. New Version Beginner to Advanced Tool. This Tool is made for educational…

k4m1diamond/flowise-rce

Proof-of-concept exploit code for CVE-2025-58434 and CVE-2025-59528, demonstrating remote code execution in Flowise.

abraxas/pfsense-sshguard-crlf

pfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - sshguard THRESHOLD CRLF

horizon3ai/ahsaycbs-auth-bypass-rce

A proof of concept exploit for CVE-2026-105133 and CVE-2026-105134 affecting AhsayCBS

d4kw1n/cve-2026-102607-zoneminder

Python PoC exploiting CVE-2026-102607, an authenticated OS command injection in ZoneMinder <= 1.38.1 exportEvents() enabling RCE, command output…

tonydelouvre/cve-2026-102425

GUI scanner and exploit for CVE-2026-102425, an unauthenticated RCE in Balbooa Forms (com_baforms) via PHP shortcode injection, with mass scanning…

cyberuser-hash/cve-2026-44011-craft-rce-poc

Python proof-of-concept for CVE-2026-44011 in Craft CMS, exploiting authenticated remote code execution with command execution and base64-wrapped…

shadowforge-cyber/cve-2026-65660-poc

Malicious Register Directive Code Injection Exploit

langz337/cve-2026-63030

Python exploit tool chaining CVE-2026-63030 REST batch-route confusion with CVE-2026-60137 SQL injection to achieve unauthenticated WordPress RCE,…

iicaicai/cve-2026-5524-poc

Python mass-exploit toolkit for CVE-2026-5524, an unauthenticated file upload RCE in the WordPress Divi Form Builder plugin, with webshell upload and…

deadexpl0it/cve-2026-78006-poc

POC for CVE-2026-78006 The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution

unpredictable21/cve-2026-75429_powerjob_friend_process_rce

Unauthenticated remote code execution exploit for PowerJob Server via Groovy injection in the /friend/process endpoint, enabling arbitrary command…

maxprog-svg/cve-2026-33017

CVE-2025-62593 — Ray Unauthenticated RCE Exploit is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine.

ysrc/pil-rce-by-ghostbutt

Exploiting Python PIL Module Command Execution Vulnerability

simoesctt/ctt-enhanced-cve-2026-46339-exploit-engine

Python framework exploiting CVE-2026-46339 for unauthenticated RCE on 9Router via MCP bridge, using temporal sharding and dispersion to evade…

rafabd1/cve-2026-75604-poc

Proof-of-concept exploit for CVE-2026-75604, an unauthenticated remote code execution in Windows-hosted Next.js apps, with callback-based command…