WP-CVE-2026-87902
svtagan/wp-cve-2026-87902Read-only PHP diagnostic script that checks WordPress version, core checksums, extra PHP files, and known plugin paths for CVE-2026-87902 exposure…
configuration-auditingdefensive-toolsincident-response+7
svtagan/wp-cve-2026-87902Read-only PHP diagnostic script that checks WordPress version, core checksums, extra PHP files, and known plugin paths for CVE-2026-87902 exposure…
norrig/cve-2021-41773-exploiterSchool project - Please use other repos for actual testing
diogolourencodev/middleforceSimple script to attempt a Bypass on a server possibly vulnerable to CVE-2025-29927 (Next.js Middleware)
vimashdilshara/-cve-2026-1657Exploit for CVE-2026-1657, an unauthenticated image upload vulnerability via the 'ep_upload_file_media' AJAX endpoint, allowing remote file upload.
null200ok/cve-2026-22730-scannerScanner and exploit tool for CVE-2026-22730, a SQL injection in Spring AI's MariaDB vector store. Supports time-based detection, GET/POST methods,…
mothra-1/cve-2026-31844Authenticated SQL injection scanner for Koha Library Management System (CVE-2026-31844) using boolean-based blind technique to verify vulnerability…
f4s1on/cve-2026-39363Batch vulnerability scanner for CVE-2026-39363 in Vite dev server, exploiting WebSocket origin validation bypass to read arbitrary files via…
iniivan13/cve-2026-1107Nuclei template for detecting CVE-2026-1107 in EyouCMS, exploiting path traversal in check_userinfo to read arbitrary files and potentially achieve…
murrez/cve-2026-0740Exploit script for CVE-2026-0740 targeting Ninja Forms file upload endpoints to upload a PHP shell, scanning a list of URLs and logging successful…
0xgh057r3c0n/cve-2026-3844WordPress - Breeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload
nvicloud/cve-2026-12352Proof-of-concept for CVE-2026-12352, an authentication bypass in Digi PortServer TS that discloses device configuration including plaintext RADIUS…
baba01hacker666/cve-2026-33032Python proof-of-concept for CVE-2026-33032 that inspects nginx status and configs, then demonstrates unauthorized config write with reload to deploy…
boreas37/cve-2026-64638-poc-xss2shell-XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template
yili-soc/vm-homelab-log4shell-assessmentFull-lifecycle vulnerability management on a live Log4Shell (CVE-2021-44228) target — scan, manual exploitation, network detection, and remediation…
renniepak/cspbypassCSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting)…
randomrobbiebf/nuclei-drupal-saNuclei templates for drupal vulns... far from perfect
bishopfox/fortiweb-auth-bypass-checkDetects CVE-2025-64446 authentication bypass in FortiWeb by exploiting a path traversal to confirm vulnerability, without administrative actions.
jenderal92/ssti-exploit-detectorSSTI Exploit Detector is a tool designed to detect potential Server-Side Template Injection (SSTI) vulnerabilities in web applications.