pre-auth

Here are 9 public repositories matching this topic...

DeathShotXD / Comment2Shell

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker

wordpress exploit xss poc rce bug-bounty infosec nuclei webshell webappsec web-exploitation web-application-security security-research zeroday pre-auth zero-click nuclei-templates cve-2026-93485

Updated Sep 30, 2026
Python

shinthink / CVE-2026-57827

Star

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfiles < 1.17.12

security exploit file-upload joomla poc rce vulnerability infosec cve pentest pre-auth cve-2026-57827 rsfiles

Updated Jul 29, 2026
Python

shinthink / CVE-2026-63223

Star

CVE-2026-63223 — CI4RCE: CodeIgniter 4 is_image/mime_in File Upload RCE. Magic bytes bypass (getExtension vs getClientExtension). CVSS 9.8 | CWE-434 | CI4 < 4.7.4

php security exploit codeigniter file-upload poc rce vulnerability infosec cve pentest magic-bytes ci4 pre-auth is-image cve-2026-63223 ci4rce mime-in

Updated Aug 4, 2026
Python

shinthink / CVE-2026-65761

Star

EasyStore Joomla Pre-Auth SQL Injection via filter_sortby Direction (CVE-2026-65761, CVSS 9.3)

python security exploit joomla sql-injection vulnerability cve joomshaper pre-auth blind-sqli cve-2026-65761 easystore

Updated Jul 24, 2026
Python

0xrobiul / CVE-2023-49070

Star

Exploit Of Pre-auth RCE in Apache Ofbiz!!

rce cve ofbiz pre-auth apache-ofbiz cve-2023-49070

Updated Dec 26, 2023
Python

shinthink / CVE-2026-66066

Star

CVE-2026-66066 — KindaRails2Shell: Rails Active Storage/libvips Arbitrary File Read → RCE. MATLAB/HDF5 dual-identity file → SECRET_KEY_BASE theft → forged variation. CVSS 9.5 | Rails < 8.1.3.1

ruby rails security exploit libvips poc rce vulnerability infosec cve pentest activestorage file-read pre-auth cve-2026-66066 kindarails2shell kr2s

Updated Aug 4, 2026
Python

shinthink / CVE-2026-60004

Star

CVE-2026-60004 — Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone → post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1

git hook security exploit poc rce gitea vulnerability infosec cve pentest code-injection pre-auth forgejo cve-2026-60004

Updated Aug 3, 2026
Python

shinthink / CVE-2026-63030

Star

WordPress Core Pre-Auth RCE via REST Batch Route Confusion + SQLi (CVE-2026-63030 + CVE-2026-60137)

python wordpress security exploit rce sql-injection vulnerability cve batch-api pre-auth wp2shell cve-2026-63030 cve-2026-60137

Updated Jul 24, 2026
Python

Candisexterior171 / CVE-2026-57827

Star

Demonstrate the unauthenticated remote code execution vulnerability in the RSFiles! Joomla component through an arbitrary file upload.

security exploit file-upload joomla poc rce vulnerability cve pentest pre-auth cve-2026-57827 rsfiles

Updated Oct 2, 2026
Python

Add this topic to your repo

To associate your repository with the pre-auth topic, visit your repo's landing page and select "manage topics."

Learn more