Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to conditional RCE (WP 4.7.0-7.1.1, fixed 7.1.2). Authorized/defensive testing.
☆13Sep 23, 2026Updated last month
Alternatives and similar repositories for cve-2026-87902-wordpress-lfi-lab
Users that are interested in cve-2026-87902-wordpress-lfi-lab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.☆16Aug 30, 2026Updated last month
- ☆22Sep 28, 2026Updated 3 weeks ago
- Leveraging arbitrary file read to RCE on Oracle PeopleSoft☆12Apr 2, 2025Updated last year
- Terminal research and study client for MITRE ATT&CK®☆22Oct 12, 2026Updated 2 weeks ago
- Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.☆46Updated this week
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM☆26Updated this week
- ☆11Apr 23, 2026Updated 6 months ago
- CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit☆18May 5, 2026Updated 5 months ago
- ☆23Jun 5, 2026Updated 4 months ago
- Exploit for CVE-2026-33725 - Remote Code Execution and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import☆25Apr 23, 2026Updated 6 months ago
- Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.☆73Updated this week
- CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656☆101Updated this week
- iboot researches☆14Sep 13, 2026Updated last month
- CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)☆13Aug 21, 2026Updated 2 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- macOS < 26.6 local privilege escalation PoC☆21Sep 18, 2026Updated last month
- RE Rust rewrites on steroids☆33Updated this week
- Gain shellcode execution via T4 Text Transform files/TextTransoform.exe☆67Updated this week
- Next.js RCE☆52Sep 29, 2026Updated 3 weeks ago
- High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting…☆45Aug 1, 2026Updated 2 months ago
- Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness☆46Updated this week
- An intelligent code analysis system powered by AI large language models that automatically generates project summaries, tech stack analys…☆25Sep 20, 2026Updated last month
- Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + du…☆27Oct 8, 2026Updated 2 weeks ago
- List of lockdownd vulnerabilities in iOS 26.5☆19Oct 3, 2026Updated 3 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Oct 7, 2026Updated 2 weeks ago
- For PHP, CTI agencies, and CISA. This is for security hardening and bug awareness only.☆66Updated this week
- This repository documents the VectorFreed RCE chain and includes a PoC for CVE-2026-96889.☆19Oct 15, 2026Updated last week
- PoC for CVE-2026-66066 in Ruby on Rails☆23Jul 30, 2026Updated 2 months ago
- A proof‑of‑concept C2 framework that uses Server‑Sent Events (SSE) and the MCP protocol for agent registration, command dispatch, and res…☆34Apr 28, 2025Updated last year
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆22Sep 20, 2026Updated last month
- A Burp Suite extension for Lightning/Aura framework security testing with advanced action management, context editing, and comprehensive …☆68Mar 2, 2026Updated 7 months ago
- CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC☆102Sep 6, 2026Updated last month
- Some bugs found via binary instrumentation and fuzzing☆25Sep 16, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fa…☆207Jul 27, 2026Updated 2 months ago
- SAML hacking pipeline for Claude Code☆13Aug 19, 2026Updated 2 months ago
- ☆21Updated this week
- 由夜安团队研发的代码审计平台，涵盖十多种常用语言，提供从上传源代码、审计、靶机验证到生成报告的一站式流程，并最终形成真正可用的 POC。平台致力于发现最真实的漏洞（包括评级与漏洞本身），同时将成本控制在最低水平。在如何平衡成本与发现高危、严重真实漏洞之间，我们将持续探索研究…☆62Sep 18, 2026Updated last month
- Proof of concept for CVE-2026-109618/CVE-2026-109619: PHP2Shell☆38Updated this week
- CVE-2025-68428 Proof of Concept☆24Jan 8, 2026Updated 9 months ago
- Electro-XSS , a buggy desktop app developed with the Electron framework.☆13Feb 10, 2022Updated 4 years ago