CVE-2026-44402
0xcyp1337/cve-2026-44402Exploit for CVE-2026-44402 targeting Voltronic Power SNMP Web Pro 1.1, enabling unauthenticated remote code execution via malicious firmware upload.…
exploitationpenetration-testingred-teaming+3
0xcyp1337/cve-2026-44402Exploit for CVE-2026-44402 targeting Voltronic Power SNMP Web Pro 1.1, enabling unauthenticated remote code execution via malicious firmware upload.…
pizz33/spring-cloud-function-spelReproduction environment and proof-of-concept for Spring Cloud Function SpEL injection leading to remote code execution, with a runnable Java 11 demo…
randomrobbiebf/cve-2025-67923JetEngine <= 3.7.7 — Unauthenticated Stored Cross-Site Scripting via CCT REST API
virgula0/cve-2026-44402Pre-Authenticated Full Root Remote Command Execution in Voltronic Power SNMP Web Pro 1.1
capture0x/magento-ver.-2.4.6Magento ver. 2.4.6 - XSLT Server Side Injection
nxploited/cve-2025-8625Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution
jas502n/gitlab-ssrf-redis-rceGitLab 11.4.7 SSRF配合redis远程执行代码
vanlam2001/roller-csrfPoC exploit for a CSRF vulnerability in Apache Roller v6.1.2 profile update endpoint. Includes HTML form exploit code to demonstrate unauthorized…
xiaolvchen/cve-2025-54100CVE-2025-54100（PowerShell 远程代码执行漏洞）
kai-one001/wordpress-news-and-blog-designer-bundle-cve-2025-14502WordPress的News and Blog Designer Bundle插件在1.1及之前所有版本中，存在通过template参数导致的本地文件包含漏洞。该漏洞使得未经身份验证的攻击者能够包含并执行服务器上的任意.php文件，从而运行这些文件中的任何PHP代码。在允许上传和包含.php文件类型…
lgenagul/wordpress-ebook-cve-2016-10924Exploits CVE-2016-10924 file disclosure in WordPress eBook Download plugin to brute-force server processes and retrieve sensitive files.
imbios/lab-cve-2016-15042CVE-2016-15042 lab: Dockerized WordPress PoC for unauthenticated file upload in Frontend File Manager <4.0 and N‑Media Post Front‑end Form <1.1
titanmaster96/cve-2025-9933A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file…
dylandavis1/cve-2025-63708Proof-of-concept exploit for CVE-2025-63708, a stored XSS vulnerability in AI Font Matcher. Demonstrates session cookie theft via unsanitized font…
nxploited/cve-2024-51793WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability
nxploited/cve-2024-50492ScottCart <= 1.1 - Unauthenticated Remote Code Execution
jnnshschl/cve-2023-38146PoC for the ThemeBleed Windows 11 CVE-2023-38146 written in python using impacket. https://jnns.de/posts/cve-2023-38146-poc/
mrvirusir/cve-2021-43258ChurchInfo 1.2.13-1.3.0 Remote Code Execution Exploit