CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)
☆14Aug 21, 2026Updated 2 months ago
Alternatives and similar repositories for CVE-2026-34910-PoC
Users that are interested in CVE-2026-34910-PoC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Process Explorer vulnerable driver PPL Bypass☆27Sep 30, 2026Updated 3 weeks ago
- Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when a…☆64Oct 6, 2026Updated 2 weeks ago
- CVE-2026-48909 PoC☆24Jul 7, 2026Updated 3 months ago
- PoC for CVE-2026-66066 in Ruby on Rails☆23Jul 30, 2026Updated 2 months ago
- ☆23Sep 28, 2026Updated 3 weeks ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Updated Exploit - pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)☆23Jul 23, 2024Updated 2 years ago
- This repository documents the VectorFreed RCE chain and includes a PoC for CVE-2026-96889.☆19Oct 15, 2026Updated last week
- Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + du…☆26Oct 8, 2026Updated 2 weeks ago
- CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC☆100Sep 6, 2026Updated last month
- Next.js RCE☆53Sep 29, 2026Updated 3 weeks ago
- XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template☆57Aug 21, 2026Updated 2 months ago
- container escape POCs for CVE-2026-80521 and CVE-2026-52910☆48Sep 22, 2026Updated 3 weeks ago
- Acunetix automate telegram bot☆12Jul 19, 2024Updated 2 years ago
- CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfi…☆16Jul 29, 2026Updated 2 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability☆10Jul 12, 2024Updated 2 years ago
- Exploit watch archive, an automated weekly gather of exploit sources 0/Nday releases☆85Updated this week
- # 🕵️ PathCatcher v1.0 - Path Traversal & LFI Scanner☆25Jul 13, 2025Updated last year
- Scan for and exploit the zerologon vulnerability.☆10Sep 15, 2020Updated 6 years ago
- ☆19Oct 10, 2025Updated last year
- SolarView Compact through 6.00 downloader.php commands injection (RCE) nuclei-templates☆15Jun 16, 2023Updated 3 years ago
- A python script to automatically dump files and source code of a Symfony server in debug mode.☆13Sep 8, 2026Updated last month
- Tool for CVE-2022-1388☆13May 13, 2022Updated 4 years ago
- Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.…☆44Sep 11, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- KEV-gated continual-learning XSS specialist with execution-authoritative browser verification☆155Sep 28, 2026Updated 3 weeks ago
- WordPress Plugin WP Statistics 13.0.7 - Time-Based Blind SQL Injection (Unauthenticated)☆13May 31, 2021Updated 5 years ago
- Nuclei templates which I wrote myself☆10Jan 8, 2022Updated 4 years ago
- GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image☆62Updated this week
- A curated list of awesome swiss army knife libraries and projects.☆11Aug 12, 2020Updated 6 years ago
- PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp☆22Aug 9, 2026Updated 2 months ago
- parse ffuf & map endpoints to wordlists☆20Feb 25, 2021Updated 5 years ago
- Unauthenticated RCE on CraftCMS when PHP `register_argc_argv` config setting is enabled☆48Dec 23, 2024Updated last year
- PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with…☆39Sep 22, 2026Updated 3 weeks ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Simple PoC package for testing for dependency confusion vulnerabilities.☆11Feb 9, 2021Updated 5 years ago
- ☆19Oct 2, 2022Updated 4 years ago
- Self-hostable Cloudflare Mesh manager — nodes, devices, .mesh DNS, WireGuard, DNS filtering☆24Sep 18, 2026Updated last month
- Reflected XSS Payload List for Vue.js (2 & 3)☆16Jan 12, 2023Updated 3 years ago
- ☆13May 18, 2022Updated 4 years ago
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆25Oct 14, 2026Updated last week
- CVE-2026-26980 — Ghost CMS Content API SQL Injection Lab (unauthenticated blind SQLi via slug filter ordering)☆19Apr 18, 2026Updated 6 months ago