Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM
☆26Oct 20, 2026Updated this week
Alternatives and similar repositories for CVE-2026-106173
Users that are interested in CVE-2026-106173 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆20Oct 10, 2025Updated last year
- CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)☆13Aug 21, 2026Updated 2 months ago
- Next.js RCE☆52Sep 29, 2026Updated 3 weeks ago
- This repository documents the VectorFreed RCE chain and includes a PoC for CVE-2026-96889.☆19Oct 15, 2026Updated last week
- CVE-85884 POC☆35Oct 13, 2026Updated last week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆22Sep 28, 2026Updated 3 weeks ago
- Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)☆20Aug 7, 2026Updated 2 months ago
- Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to…☆13Sep 23, 2026Updated last month
- Metabase SQLi☆22Aug 27, 2026Updated last month
- CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfi…☆16Jul 29, 2026Updated 2 months ago
- Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.☆16Aug 30, 2026Updated last month
- A lightweight Linux desktop extension for managing V2Ray proxy connections with ease.☆22Oct 20, 2026Updated last week
- CVE-2026-48909 PoC☆24Jul 7, 2026Updated 3 months ago
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆45Oct 18, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆17Mar 26, 2024Updated 2 years ago
- Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + du…☆27Oct 8, 2026Updated 2 weeks ago
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆35Oct 14, 2026Updated last week
- Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.☆37Updated this week
- For PHP, CTI agencies, and CISA. This is for security hardening and bug awareness only.☆66Updated this week
- ☆23Sep 12, 2026Updated last month
- Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.☆39Updated this week
- End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfilte…☆29Aug 26, 2026Updated 2 months ago
- A loader for bitbucket 2022 rce (cve-2022-36804)☆12Jul 6, 2026Updated 3 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Fileless ELF execution☆85Sep 12, 2026Updated last month
- Malicious powershell scripts loader designed to avoid detection.☆63Jun 16, 2023Updated 3 years ago
- Updated Exploit - pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)☆23Jul 23, 2024Updated 2 years ago
- ☆38Sep 8, 2026Updated last month
- 403 Access Bypass Tester☆125Oct 13, 2026Updated last week
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆171Oct 8, 2026Updated 2 weeks ago
- This IP logger uses Discord webhooks to send data to a specified Discord channel. Instead of using a persistent webhook, the application …☆11Aug 16, 2023Updated 3 years ago
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆78Aug 28, 2026Updated last month
- Powershell & Javascript Obfuscator☆49Aug 24, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- WhatAboutSAM is my custom PoC of a Windows SAM dumper☆44Updated this week
- Full and complete RCE exploit for Magento Polyshell☆30Apr 9, 2026Updated 6 months ago
- FortiSandbox RCE Scanner — CVE-2026-39808☆27Apr 21, 2026Updated 6 months ago
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- Exploit watch archive, an automated weekly gather of exploit sources 0/Nday releases☆88Updated this week
- Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.☆46Updated this week
- PHP 8.5.5 — var_destroy __destruct reentrancy UAF. Sister bug to Calif MAD Bugs finding; survives their proposed patch. ASAN-confirmed Po…☆43May 2, 2026Updated 5 months ago