CVE-2026-48909 PoC
☆24Jul 7, 2026Updated 3 months ago
Alternatives and similar repositories for CVE-2026-48909
Users that are interested in CVE-2026-48909 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfi…☆16Jul 29, 2026Updated 2 months ago
- PoC for CVE-2026-66066 in Ruby on Rails☆23Jul 30, 2026Updated 2 months ago
- CVE-2026-75604 Next.js Windows RCE poc☆105Aug 28, 2026Updated last month
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆16Jul 27, 2026Updated 2 months ago
- Metabase SQLi☆22Aug 27, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Next.js RCE☆53Sep 29, 2026Updated 3 weeks ago
- ☆33Apr 14, 2026Updated 6 months ago
- CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, S…☆28Jun 23, 2026Updated 3 months ago
- Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)☆59Aug 10, 2026Updated 2 months ago
- A Burp Suite extension that converts IP addresses to decimal notation, useful for SSRF bypass and WAF evasion testing. Created by Harshad…☆13Dec 9, 2024Updated last year
- Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.☆61Jul 20, 2026Updated 3 months ago
- CVE-2026-8452 PreAuth RCE☆65Aug 14, 2026Updated 2 months ago
- Blind XSS SVG☆10Mar 27, 2023Updated 3 years ago
- nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.☆35Jul 27, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This is a write up of the exploit I developed for the Pwn2Own Automotive 2026 competition.☆35Oct 13, 2026Updated last week
- Reverse engineering analysis of DarkTortilla RAT, a sophisticated malware that steals credit card data, decrypts browser passwords, and e…☆49Sep 5, 2026Updated last month
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- Exploit of the way update plugins works in Webmin, used to gain access to whatever Webmin is being run as (normally root). Written by mem…☆12Nov 15, 2019Updated 6 years ago
- SSRFHunter☆18Jan 17, 2026Updated 9 months ago
- Open, hands-on study notes on wireless security & Wi-Fi penetration testing (802.11, WEP/WPA/WPA2/WPA3, aircrack-ng). CC BY 4.0.☆131Jul 22, 2026Updated 2 months ago
- POC pre-auth RCE on Exchange☆187Aug 22, 2026Updated last month
- Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, c…☆35Aug 18, 2026Updated 2 months ago
- SharpWSUS is a c# tool for abusing Microsoft Windows Server Update Services for Lateral Movement☆11Nov 20, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This PoC demonstrates a race condition in the Windows kernel leading to a double-free vulnerability, allowing local privilege escalation …☆21Nov 18, 2025Updated 11 months ago
- `rng_get()` links to MicroPython software `PRNG` instead of the hardware `TRNG`, shrinking seed entropy to `~2⁴⁰`☆32Aug 1, 2026Updated 2 months ago
- CVE-2026-1731 - Critical command injection vulnerability in BeyondTrust Remote Support and Privileged Remote Access due to unsafe Bash ar…☆37Feb 11, 2026Updated 8 months ago
- MariaDB 13.0.1-rc RCE lab — priv-esc + heap UAF + JOP chain to system() as uid 999(mysql) on stock Docker image. Found with RAPTOR and ra…☆68Aug 3, 2026Updated 2 months ago
- A proof-of-concept Cloudflare Turnstile bypass system built with Rust and JavaScript. An effective, multi-component token-harvesting syst…☆69Oct 1, 2026Updated 2 weeks ago
- Kali365 - EvilTokens Replica☆74Jul 7, 2026Updated 3 months ago
- ☆35Aug 14, 2026Updated 2 months ago
- A fast web crawler for gathering URLs, JavaScript files, and hidden parameters.☆41May 28, 2026Updated 4 months ago
- Webmin 1.910 - Remote Code Execution Using Python Script☆13Feb 6, 2024Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- SVG Steganography toolkit☆16Jun 18, 2026Updated 4 months ago
- ☆24Jul 7, 2026Updated 3 months ago
- ☆39Dec 14, 2024Updated last year
- ☆16Jun 27, 2025Updated last year
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- ☆23Jul 6, 2026Updated 3 months ago
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago