CVE-2026-36959
kirubel-cve/cve-2026-36959Proof-of-concept exploit for CVE-2026-36959, a missing rate limiting vulnerability in U-SPEED Router firmware allowing brute-force attacks on the…
authenticationexploitationpenetration-testing+2
kirubel-cve/cve-2026-36959Proof-of-concept exploit for CVE-2026-36959, a missing rate limiting vulnerability in U-SPEED Router firmware allowing brute-force attacks on the…
g-rubert/wordpress_dosProof-of-concept for Denial of Service (DoS) attacks against WordPress 4.9.8 and 5.5 via unauthenticated requests to vulnerable admin pages, causing…
arkha-corvus/letsdefend-soc235-atlassian-confluence-broken-access-control-0-day-cve-2023-22515-eventid-197I was presented with a high-severity alert indicating a potential exploit attempt of CVE-2023-22515, a zero-day vulnerability in Atlassian…
joelczk/cve-2025-48461Technical disclosure of a predictable session cookie vulnerability (CVE-2025-48461) in Advantech WISE-4060 IoT portal, enabling bruteforce…
wrathfuldiety/cve-2025-56311CSRF vulnerability in FD602GW-DX-R410 router allows remote attackers to reboot the device via a crafted POST request to /boaform/admin/formReboot…
m0d0ri205/wargame_re-lsCTF challenge exploiting CVE-2025-0184 DOCX SSRF vulnerability to access internal admin service and retrieve a flag. Includes exploit generator and…
vijayshankar22/cve-2017-12542This script checks if an HP iLO server is vulnerable and can add an admin user
shoucheng3/codecentric__spring-boot-admin_cve-2022-46166_2-6-9Admin interface for monitoring Spring Boot applications with health checks, metrics, log management, JMX interaction, and thread dump viewing.
cduram/cve-2023-39144CVE-2023-39144 disclosure: cleartext password exposure in Element55 Maketime appliance admin pages, enabling privilege escalation via…
dkstar11q/cve-2022-40684Authentication bypass exploit for CVE-2022-40684 targeting FortiOS, FortiProxy, and FortiSwitchManager. Checks vulnerability and overwrites admin SSH…
rxerium/cve-2024-7593Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker…
r-pradyun/cve-2025-67315CSRF vulnerability PoC and remediation guide for employee deactivation in an admin panel. Includes CVSS scoring, attack reproduction steps, and…
rodolfomarianocy/xpl-modernwms-cve-2024-57698It is possible to view the MD5 hash of the admin password and other attributes without authentication, even after initial setup and password change.…
tamaloa/avo-cve-2024-22411Proof-of-concept exploit for CVE-2024-22411 targeting the Avo admin panel. Demonstrates vulnerability exploitation in Ruby-based web applications.
karlemilnikka/cve-2024-8349-and-cve-2024-8350Authenticated Privilege Escalation to Admin exploiting Uncanny Groups for LearnDash.
ekcrsm/cve-2024-23733Proof-of-concept exploit for CVE-2024-23733: Incorrect Access Control in Software AG webMethods Integration Server 10.15.0 allowing remote attackers…
leekenghwa/cve-2023-37755---hardcoded-admin-credential-in-i-doit-pro-25-and-belowProof-of-concept for CVE-2023-37755: hardcoded admin credentials (admin/admin) in i-doit Pro 25 and below, enabling unauthorized admin login via the…
deepak983/cve-2020-19586Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI