pocexploitCVE-2026-46243
Script para comprobar si la vulnerabilidad de Linux CIFSwitch (CVE-2026-46243) nos afecta.Detecta configuraciones potencialmente vulnerables y mitigaciones sin ejecutar exploits.
Mass exploitation tool for CVE-2026-8206 – Unauthenticated Privilege Escalation via 'handle_forgot_password' in Kirki WordPress plugin (≤6.0.6).
A Bash implementation of copyfail (CVE-2026-31431)
PAN-OS: GlobalProtect Authentication Bypass
Full walkthrough of HackTheBox "Silentium" (Medium/Linux). Chains three CVEs: CVE-2025-58434 leaks a Flowise password reset token unauthenticated, enabling account takeover; CVE-2025-59528 achieves RCE via unsanitized CustomMCP node; env vars expose SSH credentials for lateral movement. CVE-2025-8110 exploits Gogs symlink write as root to escalate.
A Go implementation of CIFSwitch (CVE-2026-46243)
Exploits the CVE-2026-0257 vulnerability by forging a GlobalProtect authentication override cookie using the TLS server's public key.
SSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF
CVE-2026-24061 — GNU InetUtils Telnetd Authentication Bypass Scanner
Automated defect verification tool for 6 dnsmasq CVEs (CVE-2026-2291, 4890, 4891, 4892, 4893, 5172)
PoC for CVE-2026-53629, blind SQL injection in the GLPI history log filter
Drupal Core 10.5.5 - Error-Based SQL Injection
WordPress OrderConvo 14 - Path Traversal
Interactive Ruby shell for authorized CVE-2025-55182 (react2shell) testing
CVE-2026-8836 — lwIP SNMPv3 stack-based buffer overflow PoC (CVSS 9.8)
CVE-2025-10162 Exploit
CVE 2026 7465 Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes