CVE-2026-72898-safe-detection
franc-zar/cve-2026-72898-safe-detectionSimple script to achieve safe and non-desruptive active detection of CVE-2026-72898 (SQLi in Metabase)
penetration-testingvulnerability-analysisvulnerability-scanners+2
franc-zar/cve-2026-72898-safe-detectionSimple script to achieve safe and non-desruptive active detection of CVE-2026-72898 (SQLi in Metabase)
d-maggipinto/cve-2026-72898-metabase-sqliDetector + root-cause analysis for CVE-2026-72898 (Metabase unauthenticated SQLi via reset_password)
bishopfox/cve-2026-11374-checkDetection script for CVE-2026-11374
dwisiswant0/cve-2025-46819Proof-of-concept exploit for CVE-2025-46819, a Redis Lua long-string delimiter out-of-bounds read, demonstrating a crash via malformed input.
randomrobbiebf/cve-2024-9061WP Popup Builder – Popup Forms and Marketing Lead Generation <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via…
1337skid/cve-2026-51564Security Advisory for CVE-2026-51564
atomics-hub/exposecheckDefensive single-target self-check for Langflow CVE-2025-3248 exposure
barisbaydur/cve-2025-44148A reflected cross-site scripting (XSS) vulnerability exists in MailEnable Webmail due to improper user input sanitization in the failure.aspx. This…
m5050/cve-2019-0604CVE-2019-0604: SharePoint RCE detection rules and sample PCAP
gduma-phdata/patch-cve-2026-06555Deployed patch for CVE-2026-06555, a high-severity path traversal vulnerability in SonicWall SMA, with validation by SecOps and references to NVD and…
catatonicprime/cve-2020-3580Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm
dievus/cve-2021-37833Proof-of-concept for a reflected cross-site scripting (XSS) vulnerability in Hotel Druid 3.0.2, demonstrating arbitrary JavaScript execution via…
gquere/cve-2017-6913Stored XSS proof-of-concept exploit for open-xchange OX App Suite webmail, demonstrating unescaped HTML time tag event attributes leading to…
morzelowski/cve-2026-12243-nltk-pocDocker lab demonstrating CVE-2026-12243 path traversal in NLTK before 3.10.0, contrasting vulnerable and patched behavior with a synthetic secret in…
ibrahim-sartawi/cve-2026-26719A stored Cross‑Site Scripting vulnerability exists in xxl-job-admin JobInfoController.java where the addressList parameter accepts unsanitized…
iranzai/cve-2021-31166-exploitExploit for CVE-2021-31166 targeting HTTP Protocol Stack RCE in Windows 10 and Server versions 2004/20H2, enabling remote code execution via crafted…
aryasahil96-manu/cve-disclosuresCurated repository of security advisories and vulnerability disclosures researched and reported by the author, including CVE-2025-70336, a stored XSS…
siboy17/cve-2022-21907-http.sysProof-of-concept exploit for CVE-2022-21907, a critical remote code execution vulnerability in the Windows HTTP.sys stack, targeting vulnerable…