CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)
☆13Aug 21, 2026Updated 2 months ago
Alternatives and similar repositories for CVE-2026-34910-PoC
Users that are interested in CVE-2026-34910-PoC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM☆37Oct 20, 2026Updated 3 weeks ago
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆18Sep 23, 2026Updated last month
- Updated Exploit - pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)☆23Jul 23, 2024Updated 2 years ago
- Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.☆16Aug 30, 2026Updated 2 months ago
- CTFd plugin allowing for individual Docker containers per user or team☆12Oct 14, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- pfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - QinQ parent-if ifconfig☆19Oct 28, 2026Updated 2 weeks ago
- CVE-2026-48909 PoC☆24Jul 7, 2026Updated 4 months ago
- PoC for CVE-2026-66066 in Ruby on Rails☆23Jul 30, 2026Updated 3 months ago
- Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability☆10Jul 12, 2024Updated 2 years ago
- # 🕵️ PathCatcher v1.0 - Path Traversal & LFI Scanner☆25Jul 13, 2025Updated last year
- Scan for and exploit the zerologon vulnerability.☆10Sep 15, 2020Updated 6 years ago
- SolarView Compact through 6.00 downloader.php commands injection (RCE) nuclei-templates☆15Jun 16, 2023Updated 3 years ago
- Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when a…☆67Updated this week
- A python script to automatically dump files and source code of a Symfony server in debug mode.☆14Sep 8, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfi…☆16Jul 29, 2026Updated 3 months ago
- WordPress Plugin WP Statistics 13.0.7 - Time-Based Blind SQL Injection (Unauthenticated)☆13May 31, 2021Updated 5 years ago
- Nuclei templates which I wrote myself☆10Jan 8, 2022Updated 4 years ago
- Tool for CVE-2022-1388☆13May 13, 2022Updated 4 years ago
- ☆20Oct 10, 2025Updated last year
- parse ffuf & map endpoints to wordlists☆20Feb 25, 2021Updated 5 years ago
- Acunetix automate telegram bot☆12Jul 19, 2024Updated 2 years ago
- BIXI is a fast, stable, and powerful DDoS tool designed for efficiency. It supports multiple protocols including TCP, UDP, ICMP, HTTP, an…☆10Apr 9, 2025Updated last year
- ☆28Oct 25, 2026Updated 2 weeks ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Collection of CTF-focused courses☆10Sep 24, 2021Updated 5 years ago
- Simple PoC package for testing for dependency confusion vulnerabilities.☆11Feb 9, 2021Updated 5 years ago
- wp2shell — WordPress Core Pre-Auth RCE (CVE-2026-63030 + CVE-2026-60137). Exploit toolkit + remediation.☆17Jul 19, 2026Updated 3 months ago
- Unauthenticated RCE on CraftCMS when PHP `register_argc_argv` config setting is enabled☆48Dec 23, 2024Updated last year
- ☆13May 18, 2022Updated 4 years ago
- A curated list of awesome swiss army knife libraries and projects.☆11Aug 12, 2020Updated 6 years ago
- This is a challenge's repository of LKS Jawa Timur 2023. The repository itself contains the jeopardy challenges and Attack-Defense Challe…☆11May 25, 2023Updated 3 years ago
- Reflected XSS Payload List for Vue.js (2 & 3)☆16Jan 12, 2023Updated 3 years ago
- ☆18Oct 2, 2022Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template☆130Aug 21, 2026Updated 2 months ago
- CVE-2026-41940 latest cPanel & WHM 0day - 70 million websites are possible to expose by Chirag Artani☆26Apr 29, 2026Updated 6 months ago
- Fire Link es un lenguaje de programación basado en el lore de la serie de videojuegos Dark Souls, diseñado para la cadena de electivas de…☆11Oct 7, 2020Updated 6 years ago
- CVE-2026-26980 — Ghost CMS Content API SQL Injection Lab (unauthenticated blind SQLi via slug filter ordering)☆19Apr 18, 2026Updated 6 months ago
- request module that supports cloudflare anti ddos pages☆12Apr 3, 2022Updated 4 years ago
- CVE-2025-68428 Proof of Concept☆24Jan 8, 2026Updated 10 months ago
- This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution (RCE) vulnerabi…☆27Apr 27, 2025Updated last year
Are these results useful?