Catálogo de exploits

nanwinata/nginxrift-CVE-2026-42945

ydking0911/CVE-2026-4060-PoC

NGINX Rift 漏洞分析与复现

CVE-2026-42945

CVE-2026-44403-WingFTP-v8.1.2-POC-Exploit

Proof of concept exploit for CVE-2026-46391

These detection scripts are property of the SECPlayground Platform. Two safe detection scripts. Neither drives the close_notify-mid-BDAT trigger, so they will not crash the daemon or leave panic-log entries. Both verdicts are "likely vulnerable" — distinguishing GnuTLS from OpenSSL builds remotely is not reliable without exploitation.

ChamsBouzaiene/ai-vuln-rediscovery-nginx-cve-2026-42945

User Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action' Parameter

p3Nt3st3r-sTAr/CVE-2026-42945-POC

Scan your NGINX configuration to determine whether it is affected by CVE-2026-42945.

Test repo: simulates CVE-2025-30066 style compromised GitHub Action (for security research/testing chainradar)

A comprehensive full-lifecycle penetration testing project on Joomla 4.2.5 exploiting CVE-2023-23752 inside a Dockerized lab environment

CVE-2026-8181 - Burst Statistics 3.4.0-3.4.1.1 Unauthenticated Authentication Bypass to Admin Account Takeover | Proof of Concept

mbanyamer/CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ

CVE-2026-46300

Sentebale/CVE-2026-46300

0xFuffM3/CVE-2026-31431-CopyFail

exploit for CVE-2026-42945

Snort 3 IDS → IPS lab on Kali. Custom detection rules + iptables enforcement against ICMP recon, Nmap SYN scans, Hydra FTP brute force, and vsftpd 2.3.4 backdoor (CVE-2011-2523).

A CopyFail CVE-2026-31431 implementation in python that isnt slop! Bring your own payload

Nginx Rewrite CVE Scan(CVE-2026-42945 nginx-rift CVE-2026-9256)

There is a path injection vulnerability in OpenPLC-v3, which arises from the program not performing any validity checks on the file path parameters passed in from the command line. Attackers can read any readable file by constructing malicious paths, posing a risk of information leakage.

pixelotes/lab-cve-2023-4863

Controlled reproduction of CVE-2017-0144 (EternalBlue) in an isolated AWS EC2 lab — exploit analysis, Wireshark traffic capture, and MITRE ATT&CK mapping

🚀 CVE-2026-0073 - Android ADB Wireless Debugging Exploit (CVSS 8.8) 🔓 Zero-click authentication bypass via TLS type confusion. Gain interactive shell, execute commands, scan networks. Educational red-team tool. 🐚⚡

copy-fail-CVE-2026-31431

SessionReaper-CVE-2025-54236

Bencodin/CVE-2026-23918-poc

First CTF successfully completed! This repo documents my walkthrough of TryHackMe's Simple CTF. It covers network reconnaissance (Nmap), web exploitation (CVE-2019-9053), and credential cracking. As a dev, it was great to pivot from SQLi to a Root shell by leveraging Sudo misconfigurations. Educational purposes only.