Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.3.0–19.3.1
☆45Sep 11, 2026Updated last month
Alternatives and similar repositories for cve-2026-85706
Users that are interested in cve-2026-85706 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- GitLab Unauthenticated Arbitrary File Read☆29Sep 28, 2026Updated last month
- Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.☆16Aug 30, 2026Updated 2 months ago
- List of custom Nuclei templates☆16Nov 4, 2023Updated 3 years ago
- ☆22Sep 28, 2026Updated last month
- Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)☆59Aug 10, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)☆13Aug 21, 2026Updated 2 months ago
- CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPress☆31Oct 28, 2026Updated last week
- Track the lifetime of leaked secrets through git history - detect credential-shaped strings offline and report how long each stayed expos…☆34Oct 26, 2026Updated last week
- Private Nginx Rift ASLR lab, exploit chain, and demo recordings☆77May 25, 2026Updated 5 months ago
- CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC☆104Sep 6, 2026Updated 2 months ago
- CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution (RCE) through a buffer overfl…☆53Jan 11, 2025Updated last year
- PoC for CVE-2026-66066 in Ruby on Rails☆23Jul 30, 2026Updated 3 months ago
- Ruby-SAML / GitLab Authentication Bypass (CVE-2024-45409) exploit☆86Oct 7, 2024Updated 2 years ago
- Apache (CVE-2025-24813) GOExploiter Checker & Exploiter very Fast☆21Oct 5, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated 3 months ago
- ☆19Oct 2, 2022Updated 4 years ago
- CVE-2025-5777 Citrix NetScaler Memory Leak Exploit (CitrixBleed 2)☆30Jul 11, 2025Updated last year
- Determine the running software version of a remote F5 BIG-IP management interface.☆70Jan 3, 2024Updated 2 years ago
- Impacket is a collection of Python classes for working with network protocols.☆25Oct 27, 2026Updated last week
- ☆11Oct 21, 2026Updated 2 weeks ago
- ☆28Jan 23, 2024Updated 2 years ago
- Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.☆59Sep 25, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image☆66Oct 19, 2026Updated 2 weeks ago
- CVE-2026-32475 The Elementor Pro Forms File Upload field handles validation and file processing in two separate loops with different han…☆13Aug 21, 2026Updated 2 months ago
- n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0)☆304Mar 26, 2026Updated 7 months ago
- ☆24Jul 7, 2026Updated 3 months ago
- Claude Code skills for finding bugs and vulnerabilities — bug bounty, pentest, CTF, code review.☆20Mar 15, 2026Updated 7 months ago
- This exploit use PEB walk technique to resolve API calls dynamically, obfuscate all API calls to perform process injection.☆27Jul 26, 2024Updated 2 years ago
- ☆15Sep 24, 2026Updated last month
- This is a portable exe version of Ncat. It is different from ncat-portable-5.59BETA1 in that it uses the latest version of Ncat (Ncat-7.9…☆14Aug 16, 2024Updated 2 years ago
- CVE-2026-34486 Apache Tomcat EncryptInterceptor 绕过漏洞复现（使用GLM5.1复现完成）☆12Apr 15, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆13Jun 30, 2026Updated 4 months ago
- CVE-2026-41940 latest cPanel & WHM 0day - 70 million websites are possible to expose by Chirag Artani☆26Apr 29, 2026Updated 6 months ago
- POCs to demonstrate CVE-2026-42167 in ProFTPD☆30Apr 29, 2026Updated 6 months ago
- CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect☆34Apr 17, 2024Updated 2 years ago
- Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when a…☆65Oct 6, 2026Updated last month
- Proof of conept to exploit vulnerable proxycommand configurations on ssh clients☆18Dec 21, 2023Updated 2 years ago
- Proof-of-concept script to leverage the PAN-OS GlobalProtect authentication bypass CVE-2026-0257☆30May 29, 2026Updated 5 months ago