CVE-2026-30251
venablee/cve-2026-30251Reflected XSS vulnerability disclosure for ZenShare Suite login_newpwd.php, allowing arbitrary JavaScript execution via crafted URL in codice_azienda…
exploitationpenetration-testingvulnerability-analysis+2
venablee/cve-2026-30251Reflected XSS vulnerability disclosure for ZenShare Suite login_newpwd.php, allowing arbitrary JavaScript execution via crafted URL in codice_azienda…
venablee/cve-2026-30252The ZenShare Suite application is vulnerable by a Reflected Cross-Site Scripting (XSS) vulnerability, affecting web application login and recovery…
uwctcjnwlk/web3-decoderBurp Suite extension for decoding Ethereum JSON-RPC calls and smart contract interactions, supporting multiple chains and automatic ABI retrieval.
debugactiveprocess/cve-2026-18963Nuclei template to discover exposed Keycloak reset-credentials endpoints across multiple paths, aiding validation of CVE-2026-18963 exposure.
mr-vill4in/log4j-fuzzerAutomated scanner for CVE-2021-44228 (Log4Shell) that tests single or multiple web targets for the vulnerability using remote callback servers.
mbanyamer/cve-2026-25890-filebrowser-access-control-bypassExploit for CVE-2026-25890, a path-based authorization bypass in FileBrowser <= v2.57.0, allowing authenticated low-privileged users to read, upload,…
mbanyamer/cve-2026-24854-churchcrm-6.7.2-authenticated-numeric-sql-injectionProof-of-concept demonstrating authenticated numeric SQL injection in ChurchCRM before 6.7.2, enabling logic manipulation to bypass WHERE clauses and…
imbas007/poc-cve-2025-52970Proof-of-concept exploit for CVE-2025-52970, allowing security researchers to test single or multiple target URLs for the vulnerability.
dhammon/hoteldruid-cve-2021-42948Analyzes CVE-2021-42948, a session token exposure vulnerability in HotelDruid, demonstrating how GET parameters leak session IDs and enable session…
otakuliu/expression-sandbox-escape-simulation-labEducational lab demonstrating JavaScript expression sandbox escape techniques and patch evolution through multiple vulnerable sandbox versions, with…
dotuan1/reserch-cve-2021-41773Python-based exploit scanner for CVE-2021-41773, allowing single-target or batch scanning to detect vulnerable Apache servers.
astaruf/cve-2026-40487Proof-of-concept exploit for CVE-2026-40487, demonstrating arbitrary file upload via MIME spoofing leading to stored XSS and account takeover in…
anggatechi/mass-scanner-cve-2026-1405WordPress mass scanner for detecting CVE-2026-1405 exposure.
aydinnyunus/ai-captcha-bypassAutomates CAPTCHA solving with multimodal AI models (GPT-4o, Gemini) and Selenium, supporting text, audio, slider puzzles, and reCAPTCHA v2 via a…
commando-x/vuln-bankIntentionally vulnerable banking platform for practicing web application, API, and AI/LLM security testing, secure code review, and DevSecOps…
mr-leonardogomes/xss2shell-cve-2026-64638WordPress security scanner that fingerprints versions, detects reflected XSS across multiple targets concurrently, and supports an authenticated…
tpdlshdmlrkfmcla/cve-2018-7600CVE-2018-7600 POC (Drupal RCE)
static-flow/burpsuite-team-extensionThis Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your…