Build software better, together

Exploit para CVE-2026-4480: inyeccion de comandos en la variable %J del print command de Samba para RCE sin autenticacion via spoolss.

python linux exploit samba cybersecurity poc rce pentesting cve command-injection unauthenticated cve-2026-4480 spoolss

Updated Oct 3, 2026
Python

mbadanoiu / CVE-2023-26269

Star

CVE-2023-26269: Misconfigured JMX in Apache James

cve local-privilege-escalation unauthenticated mlet cves 0-day cve-2023-26269

Updated Nov 23, 2023

mbadanoiu / MAL-004

Star

MAL-004: Command Injection Bypass for CVE-2020-12641 in Roundcube Webmail

bypass unauthenticated remote-code-execution 0-day cve-2020-12641

Updated Apr 13, 2024

Ch4120N / CVE-2026-55579

Star

CVE-2026-55579 – Unauthenticated RCE in Pheditor via hardcoded default password "admin". Full Python exploit with file upload & terminal execution. No dependencies.

python exploit file-upload rce cve unauthenticated file-editor default-credentials severity cve-2026 cwe-798 cwe-94 cve-2026-55579 pheditor

Updated Jul 17, 2026
Python

mbadanoiu / MAL-008

Star

Case Study: SSHtranger Things (CVE-2019-6111, CVE-2019-6110) in Cisco SD-WAN

user-interaction unauthenticated remote-code-execution cve-2019-6111 cve-2019-6110

Updated Jul 1, 2024

6ickzone / Helix3-Mass-Exploiter

Star

Mass Exploiter for CVE-2026-49049

security file-upload joomla-plugin exploitation security-testing unauthenticated helix3 cve-2026-49049

Updated Sep 21, 2026
Python

TheTorjanCaptain / CVE-2026-23550-PoC

Star

CVE-2026-23550 - Modular DS WordPress Plugin **Unauthenticated Admin Access**

wordpress wordpress-plugin cybersecurity poc unauthenticated cvss10 cve-2026-23550

Updated Jan 17, 2026
Shell

Ch4120N / CVE-2026-58138

Star

CVE-2026-58138 — Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).

Updated Jul 15, 2026
Python

Critical RCE vulnerability (CVSS 9.3) in Weaver E-cology platform versions prior to build 20260312. Unauthenticated remote code execution via exposed debug endpoint at /papi/esearch/data/devops/dubboApi/debug/method. Comprehensive analysis, proof-of-concept, and detection guidance included.

java cybersecurity rce cve weaver unauthenticated vulnerability-research ecology-oa enterprise-oa

Updated Apr 16, 2026
Python

BiiTts / CVE-2026-56782-Gorse-Auth-Bypass

Star

CVE-2026-56782 — Gorse <0.5.10 unauthenticated DB dump/restore (admin_api_key fail-open). Lab + PoC, verified e2e.

poc recommender-system data-exfiltration authentication-bypass security-research unauthenticated gorse cve-2026-56782

Updated Jun 30, 2026
Python

mbadanoiu / CVE-2019-12409

Star

CVE-2019-12409: RCE Vulnerability Due to Bad Defalut Config in Apache Solr

cve unauthenticated remote-code-execution cves cve-2019-12409 0-day

Updated Apr 7, 2025

ImBIOS / lab-cve-2016-15042

Sponsor

Star

CVE-2016-15042 lab: Dockerized WordPress PoC for unauthenticated file upload in Frontend File Manager <4.0 and N‑Media Post Front‑end Form <1.1

docker wordpress file-upload poc rce nuclei wp-plugin unauthenticated security-lab cve-2016-15042

Updated Sep 3, 2025
Shell

mbadanoiu / MAL-012

Star

MAL-012: Reflected Cross-Site Scripting in Admin Console leading to Remote Code Execution in Payara Server

user-interaction unauthenticated cross-site-scripting remote-code-execution reflected-xss

Updated Apr 13, 2025

d6fault / CVE-2026-95675

Star

CVE-2026-95675 · POC

router exploit firmware poc rce tp-link dlink command-injection unauthenticated cve-2026-95675 root-rce

Updated Sep 24, 2026
Python

shinthink / CVE-2026-65883

Star

Aimy Captcha-Less Form Guard Joomla Component PHP Object Injection RCE. clfgd XOR keystream recovery + unserialize(). CVSS 10.0 | CWE-502 | aimy_captcha-less_form_guard < 20.1

security exploit joomla rce vulnerability pentesting cve unserialize unauthenticated php-object-injection cvss-10 aimy-captcha

Updated Jul 30, 2026
Python

cd-ratel / CVE-2025-32432

Star

Working PoC for CVE-2025-32432 - Craft CMS <= 5.6.16 unauthenticated RCE via Yii2 PhpManager gadget + nginx access.log poisoning

security yii2 exploit poc rce ctf cve pentest craft-cms unauthenticated cve-2025-32432

Updated May 15, 2026
Python

shinthink / CVE-2026-61424

Star

DJ-Classifieds Joomla Component Unauthenticated File Upload RCE. 3-string filter bypass via PHP short tags. CVSS 10.0 | CWE-434 | com_djclassifieds < 3.11.2

security exploit file-upload joomla rce vulnerability pentesting cve unauthenticated information-disclosure dj-classifieds cvss-10

Updated Jul 30, 2026
Python

mbadanoiu / CVE-2021-46362

Star

CVE-2021-46362: FreeMarker Server-Side Template Injection in Magnolia CMS

cve unauthenticated server-side-template-injection cves 0-day cve-2021-46362

Updated Feb 14, 2024

BiiTts / CVE-2026-58138-Conductor-Unauth-RCE

Star

CVE-2026-58138 — Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).

java poc rce graalvm conductor security-research unauthenticated workflow-orchestration orkes cve-2026-58138

Updated Jun 30, 2026
Python

unkaktus / evilclock

Star

NTP is not authenticated... but trusted

time ntp trust insecure unauthenticated

Updated May 23, 2017
Go

Navigation Menu

unauthenticated

Here are 52 public repositories matching this topic...

AlanNewberry / CVE-2026-4480-samba-print-command-injection-rce

mbadanoiu / CVE-2023-26269

mbadanoiu / MAL-004

Ch4120N / CVE-2026-55579

mbadanoiu / MAL-008

6ickzone / Helix3-Mass-Exploiter

TheTorjanCaptain / CVE-2026-23550-PoC

Ch4120N / CVE-2026-58138

keraattin / CVE-2026-22679

BiiTts / CVE-2026-56782-Gorse-Auth-Bypass

mbadanoiu / CVE-2019-12409

ImBIOS / lab-cve-2016-15042

mbadanoiu / MAL-012

d6fault / CVE-2026-95675

shinthink / CVE-2026-65883

cd-ratel / CVE-2025-32432

shinthink / CVE-2026-61424

mbadanoiu / CVE-2021-46362

BiiTts / CVE-2026-58138-Conductor-Unauth-RCE

unkaktus / evilclock

Add this topic to your repo