megafart1/cve-2026-2472-vertex-ai-sdk-google-cloudExpose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.
usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
koadt/oss-oopssec-storeSecurity training for the apps you actually ship. Open your browser and start hacking.
batj44/cve-2024-44625-gogs-rce-0.13.0Exploit for CVE-2024-44625 in Gogs 0.13.0, achieving remote code execution via symlink-follow to create a git hook, with reverse and bind shell modes.
r3vpwnx/cve-2025-58434Exploit chain for Flowise 3.0.5: unauthenticated account takeover via password-reset token disclosure (CVE-2025-58434) chained to CustomMCP…
keygraphhq/shannonShannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…
elder-plinius/t3mp3stautonomous red teaming platform; multi-agent offensive-security meta-harness
morzan6/cve-2026-77276-pocCVE-2026-77276 pre-auth macro RCE via convert-to on Collabora Online
lyn4r/cve-2026-71981Proof-of-concept exploit for CVE-2026-71981, an insecure deserialization RCE in Cypht. Executes commands and prints output via logout response.…
0xcyp1337/cve-2026-44402Exploit for CVE-2026-44402 targeting Voltronic Power SNMP Web Pro 1.1, enabling unauthenticated remote code execution via malicious firmware upload.…
0xcyp1337/cve-2026-82222-massexploitExploit tool for CVE-2026-82222, an unauthenticated RCE in GiveWP WordPress plugin. Supports single-target and batch exploitation with…
galisko/cve-2025-24799Unauthenticated SQL injection exploit for GLPI versions before 10.0.18, enabling database enumeration, credential extraction, and API token…
rmhowe425/poc-cve-2025-68613Proof-of-concept exploit for CVE-2025-68613, an authenticated remote code execution vulnerability in N8N. Executes arbitrary bash commands on…
skraft9/cve-2024-12356Non-destructive detector for unauthenticated RCE in BeyondTrust Remote Support and PRA, chaining argument injection and PostgreSQL escape bypass to…
mhtsec/cve-2026-84645Jenkins PersistenceRoot Deserialization RCE (SECURITY-3972) — PoC & analysis. Requires Item/Configure; affects weekly <= 2.579 / LTS <= 2.568.2
burakacar6/cve-2023-42793-teamcity-unauthenticated-rceA PoC and automated version detection/exploit tool for JetBrains TeamCity Authentication Bypass & RCE (CVE-2023-42793).
rmhowe425/poc-cve-2026-7873Proof-of-concept exploit for CVE-2026-7873 in Langflow, allowing authenticated remote code execution via a crafted Bash command.
rmhowe425/poc-cve-2026-10134Proof-of-concept exploit for CVE-2026-10134 in Langflow, allowing authenticated remote command execution via crafted requests.
