All pull requests

Pull requests

• Attempt at php2shell

  #22139·bwatters-r7 opened Nov 13, 2026Contributor·

  ·
  1

• Add SMB to LDAP NTLM Relaying Signing Bypass Functionality (CVE-2026-70229)

  additional-testing-requireddocsmodulern-modules
  #22138·jheysel-r7 opened Nov 12, 2026Contributor·

  ·
  2

• Add specs for the RPC health endpoint

  #22137·asimawdah opened Nov 12, 2026·2 tasks·

  ·
  1

• Honor FETCH_CHECK_CERT in curl fetch command

  #22136·Aaditya1273 opened Nov 12, 2026Contributor·6 of 7 tasks·

  ·
  3

  

• Raise on invalid wildcard in DNS UpstreamRule constructor

  #22135·Aaditya1273 opened Nov 12, 2026Contributor·6 of 7 tasks·

  ·
  3

• Add check method and AutoCheck to JBoss deployer modules

  #22134·Ghxstsec opened Nov 12, 2026·

  ·
  4

• Increase timeout for Unix shell file reads

  #22132·4n33sh opened Nov 12, 2026Contributor·

  ·
  2

• Kerberoast: try remaining SPNs when the first is invalid

  #22131·kx7m2qd opened Nov 12, 2026Contributor·3 of 4 tasks·

  ·
  1

  1

• Dedupe auto-loaded Meterpreter extensions case-insensitively

  #22130·Aaditya1273 opened Nov 12, 2026Contributor·5 of 6 tasks·

  ·
  3

• Fix xdebug_unauth_exec: undefined srvhost and listener bind race

  #22129·tacets opened Nov 11, 2026·5 tasks done·

  ·
  6

• Fix FETCH_WRITABLE_DIR ignoring FETCH_FILELESS conditions at launch time

  #22123·kx7m2qd opened Nov 10, 2026Contributor·2 of 4 tasks·

  ·
  1

  9

  

• Add F5 BIG-IP APM OAuth RCE module (CVE-2026-94127)

  ETR
  #22122·dheiland-r7 opened Nov 9, 2026Contributor·12 tasks done·

  ·
  1

• Add exploit for Redpanda Connect streams-mode management API unauthenticated RCE (CVE-2026-123270)

  needs-docs
  #22121·pagvac opened Nov 9, 2026·

  ·
  6

• Improve Nagios XI login result handling

  #22118·ryandej opened Nov 8, 2026·

  ·
  3

• Update LDAP authentication examples and add contextual security references

  additional-testing-required
  #22117·hack-ita opened Nov 8, 2026·

  ·
  1

  2

• Add/Gogs content API symlink RCE module (CVE-2025-8110)

  #22115·Ghxstsec opened Nov 7, 2026·5 tasks done·

  ·
  10

• Add sshhole module (CVE-2026-123158)

  #22114·M4nu02 opened Nov 6, 2026Contributor·8 tasks·

  ·
  13

• Add module and docs for Atlassian CVE-2026-21589

  docsETRgroup-reviewedmodule
  #22106·cdelafuente-r7 opened Nov 5, 2026Contributor·5 tasks·

  ·
  5

• Exclude ARCH_ALL/Generic payloads from Java-only exploits

  #22104·VISHNU0906 opened Nov 5, 2026·3 tasks done·

  ·
  1

  5

• Fix PwnKit check module to return CheckCode::Appears (Resolves #19590)

  #22103·vjsir830 opened Nov 5, 2026·2 tasks done·

  ·
  1

  6

• Add Zimbra EWS cross-mailbox access module (CVE-2026-10631)

  #22099·jburgess-r7 opened Nov 4, 2026Contributor·6 tasks done·

  ·
  6

• Add DarkEye domain exposure lookup

  #22098·juanmill4 opened Nov 4, 2026·5 tasks done·

  ·
  1

• Check the final response when validating reference-link redirects

  #22088·Yeagerist0 opened Nov 2, 2026Contributor·5 tasks done·

  ·
  5

• Add Control Web Panel CVE-2025-48703 exploit module

  #22086·mjatin2007 opened Nov 2, 2026Contributor·4 tasks done·

  ·
  17

• post/multi/manage/sudo: Harden askpass password handling

  #22085·mjatin2007 opened Oct 31, 2026Contributor·

  ·
  1

  5