CVE-2026-15583
abraxas/cve-2026-15583Proof-of-concept client and Docker lab reproducing CVE-2026-15583, an unauthenticated confused-deputy SSRF in Grafana MCP Server that leaks…
api-securitydata-exfiltrationexploitation+6
1
abraxas/cve-2026-15583Proof-of-concept client and Docker lab reproducing CVE-2026-15583, an unauthenticated confused-deputy SSRF in Grafana MCP Server that leaks…
manhnho/chamemaskFake identity generator. 102 countries, one HTML file, no setup.
nu11secur1ty/kouseiPython/Go framework that generates SQL injection PoC requests, automates sqlmap attacks, and manages modular exploit scripts with parameter detection…
crowsec-edtech/cve-2026-87902Python PoC exploiting CVE-2026-87902, an unauthenticated path traversal in WordPress locate_template() leading to LFI and PEAR-based RCE, with safe…
joaovicdev/exploit-cve-2026-87902Lab vulnerável (Docker) + PoC Python para a CVE-2026-87902 — path traversal não autenticado no WordPress Core (page-template -> LFI -> RCE…
lutfifakee-project/cve-2026-87902Proof-of-concept exploit for CVE-2026-87902, a WordPress Core pre-auth path traversal chaining LFI to remote code execution.
ynsmroztas/wpsniperCVE-2026-87902 detector. WordPress get_page_template LFI class. Detect-only. Authorized lab.
intuitem/ciso-assistant-communityGRC platform for risk management, compliance, and audit with 200+ frameworks, automatic control mapping, vulnerability management, and incident…
arcanum-sec/wraithBrowser-hooking framework for authorized red teams and educators. Hooks browsers via XSS, provides interactive post-exploitation control, blind-XSS…
cloudfuzz/android-kernel-exploitationHands-on workshop for learning Android kernel vulnerability analysis and exploitation, with Docker-based build environment and practical exercises.
tarpeg007/cve-2026-19490NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause analysis + PoC
toanln-cov/cve-2026-76569Reflected XSS via search GET Parameter in Phoca Download
samsayen/jqueryinguValid JQuery that profiles the system and returns info to the server in a fake analytics GET request
mindsflee/winflesherAutomated attack surface assessment framework for Active Directory and local infrastructures, correlating vulnerabilities with attack paths to domain…
hans362/cve-2026-31431-copy-fail-container-escapeContainer escape on any docker container with healthcheck enabled via CVE-2026-31431
dinosn/cve-2026-32710Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted)
soltanali0/cve-2025-4476-exploitPython test client that sends HTTP GET requests with oversized Authorization headers to trigger header-parsing bugs like CVE-2025-4476. For…
paulvkitor/log4shellwithlog4j2_13_3Springboot web application accepts a name get parameter and logs its value to log4j2. Vulnerable to CVE-2021-44228.