ersinerenler/cve-2023-46020-code-projects-blood-bank-1.0-stored-cross-site-scripting-vulnerabilityProof-of-concept exploit for stored cross-site scripting (XSS) vulnerability in Code-Projects Blood Bank V1.0 via unsanitized profile parameters,…
wattocyber/offensive-one-liners110 offensive-security one-liners for authorized testing and CTFs, grouped by category and kill-chain step.
tothi/pwn-hisilicon-dvrProof-of-concept exploit and vulnerability disclosure for HiSilicon hi3520d DVR/NVR devices. Demonstrates RCE via web interface, backdoor…
vonahisec/leprechaunThis tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.
vighneshnair7/cve-2024-48427Proof-of-concept for CVE-2024-48427: SQL injection in Sourcecodester Packers and Movers Management System v1.0. Exploits the id parameter to execute…
tlkh/prowlerDistributed Network Vulnerability Scanner
nccgroup/metadataplusA tool to use novel locations to extract metadata from Office documents.
anmolksachan/waybacklisterA New Approach to Directory Bruteforce with WaybackLister v1.0
redgridtactical/redgridlinkOffline MGRS navigation + BLE proximity team sync for 2-8 people. No cell service needed. V1.0 through V4.0 roadmap in README.
baroi-ai/cve-2024-42657CVE-2024-42657 An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of…
exdev994/cve-2026-49049CVE-2026-49049 Helix3 (JoomShaper) Joomla Unauthenticated AJAX RCE Scanner
randomrobbiebf/cve-2024-12404CF Internal Link Shortcode <= 1.1.0 - Unauthenticated SQL Injection
urban4/cve-2022-3992Cross Site Scripting on sanitization-management-system
krookiesec/cve-2024-39210Best house rental management system Local file contains vulnerability
geraldoalcantara/cve-2023-49981School Fees Management System v1.0 - Incorrect Access Control - Directory Listing
baroi-ai/cve-2024-42658CVE-2024-42658 An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookies…
xmyronn/cve-2026-11344-rceUnauthenticated remote code execution exploit for Vehicle Management System in PHP via unrestricted file upload in newdriver.php and newvehicle.php,…
