Wing FTP Server 8.1.3 - Authenticated Remote Code Execution
exploitMay 29, 2026
Wing FTP Server 8.1.3 - Authenticated Remote Code Execution
CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)
strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow
Passive checker for CVE-2026-9082 / SA-CORE-2026-004 (Drupal core SQL injection, PostgreSQL)
⚠️ DISCLAIMER: This tool is intended for authorized penetration testing and educational purposes only. Using this tool against systems without explicit written permission is illegal. The developers are not responsible for any misuse or damage caused.
Cisco Catalyst SD-WAN Peering Authentication Bypass
Linux Kernel - Local Privilege Escalation
Casdoor 3.54.1 - Arbitrary File Write via Path Traversal
MeiG Smart FORGE_SLT711 - OS Command Injection
CVE-2026-39987 Exploitation Tool - Marimo < 0.23.0 Pre-Auth RCE (WebSocket)
Automated scanner & post-exploitation toolkit for CVE-2026-41940 — cPanel & WHM root authentication bypass via session-file CRLF injection
Drupal CVE-2026-9082 Blind SQL Injection Checker (Single & Bulk)