Every new exploit,
on the radar.

A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability.

One command to fix CVE-2025-66478 (React 2 Shell RCE) in your Next.js / React RSC app.

React2Shell Ultimate - The most comprehensive CVE-2025-66478 Scanner for Next.js RSC RCE vulnerability. Multi-mode detection, WAF bypass, local scanning.

React2Shell - CVE-2025-66478 RCE Exploit

CVE-2025-66478 Proof of Concept

🛡️ Audit your Next.js & React Server Components stack for critical vulnerabilities (CVE-2025-66478, CVE-2025-55184). Detects risks & generates fix commands. 10…

My attempt to make honeypot for React2Shell vulnerability (CVE-2025-66478)

CVE-2025-49844 (RediShell)

CVE-2025-49844 – Redis Lua Parser Use-After-Free

Proof-of-concept for CVE-2025-49844

🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.

CVE-2025-49844 POC

🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.

Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463

Local Privilege Escalation to Root via Sudo chroot in Linux

Privilege escalation to root using sudo chroot, NO NEED for gcc installed.

CVE-2025-32463 Proof of concept

This CVE addresses a vulnerability in sudo versions 1.9.14 to 1.9.17, enabling unauthorized local privilege escalation to root access.

PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability

# CVE-2025-32463 – Sudo EoP Exploit (PoC) with precompiled .so

A deep dive into two critical Sudo vulnerabilities (CVE‑2025‑32463 & CVE‑2025‑32462) that enable local privilege escalation across major Linux distributions.

GhostLock One-Tap Execution App (CVE-2026-43499)

KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499

Jailbreak supported Google Pixel phones with CVE-2026-43499

GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader

CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k

KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 / 6.6 / 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo/iQOO、小米、三星、Pixel 等）离线可用、按机…

CVE-2026-43499 PoC

Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

A public open sourced tool. Log4J scanner that detects vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046, etc) on your file-system within any applicat…

An agent to hotpatch the log4j RCE from CVE-2021-44228.

PoC

PoC for the "Windows Notepad RCE"

CVE-2026-20841

🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.

PoC for a remote code execution flaw in Windows Notepad's markdown renderer. The markdown engine does not restrict URL protocols, allowing arbitrary protocol h…

out-of-bounds write in Fortinet FortiOS CVE-2024-21762 vulnerability

Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762

Chequea si tu firewall es vulnerable a CVE-2024-21762 (RCE sin autenticación)

The PoC demonstrates the potential for remote code execution by exploiting the identified security flaw.

Proof-of-concept scanner targeting CVE-2024-21762 in FortiOS SSL VPN’s /remote/hostcheck_validate endpoint with reverse shell payload delivery.

The FortiGate SSL-VPN pot of gold. CVE-2024-21762 and CVE-2023-27997. 79 working exploit clients. 53 hardware SKUs. 55 FortiOS builds.

This script performs vulnerability scanning for CVE-2024-21762, a Fortinet SSL VPN remote code execution vulnerability. It checks whether a given server is vul…

Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing

xortigate-cve-2023-27997

POC FortiOS SSL-VPN buffer overflow vulnerability

Search vulnerable FortiOS devices via Shodan (CVE-2023-27997)

The FortiGate SSL-VPN pot of gold. CVE-2024-21762 and CVE-2023-27997. 79 working exploit clients. 53 hardware SKUs. 55 FortiOS builds.

A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager

PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)

Research repository tracking affected IPs from the Fortigate CVE-2022-40684 configuration leak by Belsen Group

Bash PoC for Fortinet Auth Bypass - CVE-2022-40684

Exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager

An authentication bypass using an alternate path or channel in Fortinet product

CVE-2018-13379

CVE-2018-13379 Script for Nmap NSE.

This module massively scan and exploit a path traversal vulnerability in the FortiOS SSL VPN web portal may allow an unauthenticated attacker to download Forti…

Fortinet FortiOS路径遍历漏洞 （CVE-2018-13379）批量检测脚本

CVE-2018-13379 Exploit

FortiVuln

Fortigate CVE-2018-13379 - Tool to search for vulnerable Fortigate hosts in Rapid7 Project Sonar data anonymously through The Tor network.

CVE-2018-13379 fortiOS vulnerability POC

Deterministic kernel exploit based on CVE-2023-32434.

oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙

Netlogon and CLDAP vulnerability research with a proof of concept.

CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing.

Technical analysis and Proof-of-Concept (PoC) for CVE-2026-41089, a critical unauthenticated Remote Code Execution (RCE) vulnerability in the Windows Netlogon …

CVE-2026-41089 checker: unauthenticated, non-destructive detection for the Netlogon CLDAP stack buffer overflow (CVSS 9.8). Reports whether a domain controller…

CVE-2026-41089 是 Windows Netlogon 服务中一个关键的远程代码执行漏洞，单包即可崩溃 lsass.exe，导致域控制器在约 30-60 秒内重启。此期间该 DC 的所有域认证将失败。

CVE-2026-41089

🛡️ Official AI Security Tool diagnostic module for CVE-2026-41089 (Windows Netlogon Stack Buffer Overflow RCE). Features technical writeup, attack architecture…

Scan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.

🐱‍💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱‍💻

Nexus Repository Manager 3 Remote Code Execution without authentication < 3.15.0

Some debug notes and exploit(not blind)

CVE-2019-7238 Nexus RCE漏洞图形化一键检测工具。CVE-2019-7238 Nexus RCE Vul POC Tool.

nmap scripts for vuln cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327

RCE

Vulhub nexus/CVE-2019-7238: Nexus Repository Manager 3 JEXL Injection RCE (CVE-2019-7238), run with Isoloom

Exploit for CVE-2021-3129

Laravel <= v8.4.2 debug mode: Remote code execution (CVE-2021-3129)

Laravel RCE Exploit PoC - CVE-2021-3129 (user-friendly with automatic log path detection)

Laravel debug rce

Exploit for CVE-2021-3129

Laravel Debug mode RCE漏洞（CVE-2021-3129）poc / exp

Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code

Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori / Xint.

A Go implementation of copyfail (CVE-2026-31431)

PoC: fully unprivileged container escape to node-level code execution on Kubernetes via CVE-2026-31431 page-cache corruption + shared image layers. Validated o…

CVE-2026-31431 纯文件利用

Most Linux LPEs need a race window or a kernel-specific offset. Copy Fail is a straight-line logic flaw, it needs neither. The same 732-byte Python script (or …

CVE-2026-31431-killed page-cache exploit — code exec into containers sharing the same image layer

Minimal no-libc Linux x86_64 ELF PoC build for Copy Fail (CVE-2026-31431)

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020…

CVE-2020–14882、CVE-2020–14883

CVE-2020-14882_ALL综合利用工具，支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。

CVE-2020–14882 by Jang

CVE-2020-14882/14883/14750

CVE-2020-14882 Weblogic-Exp

CodeTest信息收集和漏洞利用工具，可在进行渗透测试之时方便利用相关信息收集脚本进行信息的获取和验证工作，漏洞利用模块可选择需要测试的漏洞模块，或者选择所有模块测试，包含CVE-2020-14882, CVE-2020-2555等，可自己收集脚本后按照模板进行修改。

CVE-2020-14882批量验证工具。

Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具，采用JDK 1.8+NetBeans8.2开发，软件运行必须安装JDK 1.8或者以上版本。 支持：weblogic xml反序列化漏洞 CVE-2017-10271/CNVD-C-2019-48814/CVE-2019-2725检查。

WebLogic Exploit

Oracle WebLogic WLS-WSAT Remote Code Execution Exploit (CVE-2017-10271)

WebLogic CNVD-C-2019_48814 CVE-2017-10271 Scan By 7kbstorm

CVE-2019-2725poc汇总 更新绕过CVE-2017-10271补丁POC

CVE-2017-10271 WEBLOGIC RCE (TESTED)

WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote …

CVE-2017-10271 POC

Ghostcat read file/code execute,CNVD-2020-10487(CVE-2020-1938)

tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含

Cnvd-2020-10487 / cve-2020-1938, scanner tool

Tomcat常见漏洞GUI利用工具。CVE-2017-12615 PUT文件上传漏洞、tomcat-pass-getshell 弱认证部署war包、弱口令爆破、CVE-2020-1938 Tomcat AJP文件读取/包含

Tomcat的文件包含及文件读取漏洞利用POC

CVE-2020-1938漏洞复现

tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含

Tomcat常见漏洞GUI利用工具。CVE-2017-12615 PUT文件上传漏洞、tomcat-pass-getshell 弱认证部署war包、弱口令爆破、CVE-2020-1938 Tomcat AJP文件读取/包含

POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.

just a python script for cve-2017-12615

Tomcat PUT方法任意文件写入（CVE-2017-12615）exp

CVE-2017-12617 and CVE-2017-12615 for tomcat server

CVE-2017-12615 Tomcat RCE (TESTED)

tomcat-put-cve-2017-12615

Basic PoC for CVE-2023-27524: Insecure Default Configuration in Apache Superset

Apahce-Superset身份认证绕过漏洞(CVE-2023-27524)检测工具

Apache Superset Auth Bypass (CVE-2023-27524)

Apache Superset Auth Bypass Vulnerability CVE-2023-27524.

Perform With Apache-SuperSet Leaked Token [CSRF]

Apache Superset - Authentication Bypass

Tool for finding CVE-2023-27524 (Apache Superset - Authentication Bypass)

Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965

Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit

burpsuite 的Spring漏洞扫描插件。SpringVulScan：支持检测：路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977

Spring4Shell - Spring Core RCE - CVE-2022-22965

CVE-2022-22965\Spring-Core-RCE核弹级别漏洞的rce图形化GUI一键利用工具，基于JavaFx开发，图形化操作更简单，提高效率。

Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive)

SpringFramework 远程代码执行漏洞CVE-2022-22965

CVE-2022-22965写入冰蝎webshell脚本

spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP,CVE-2022-22963

CVE-2022-22963 PoC

CVE-2022-22963 is a vulnerability in the Spring Cloud Function Framework for Java that allows remote code execution. This python script will verify if the vuln…

Spring Cloud Function Vulnerable Application / CVE-2022-22963

CVE-2022-22963 Spring-Cloud-Function-SpEL_RCE_exploit

This includes CVE-2022-22963, a Spring SpEL / Expression Resource Access Vulnerability, as well as CVE-2022-22965, the spring-webmvc/spring-webflux RCE termed …

CVE-2022-22947

CVE-2022-22947 注入Godzilla内存马

Spring Cloud Gateway 远程代码执行漏洞Exp Spring_Cloud_Gateway_RCE_Exp-CVE-2022-22947

CVE-2022-22947批量

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947） 注入哥斯拉内存马

Spring Cloud Gateway < 3.0.7 & < 3.1.1 Code Injection (RCE)

CVE-2022-22947_EXP,CVE-2022-22947_RCE,CVE-2022-22947反弹shell,CVE-2022-22947 getshell

SpringCloudGatewayRCE - CVE-2022-22947 / Code By:Tas9er

burpsuite 的Spring漏洞扫描插件。SpringVulScan：支持检测：路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977

Vulhub spring/CVE-2016-4977: Spring Security OAuth2 Whitelabel SpEL RCE (CVE-2016-4977), run with Isoloom

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020…

Solr_CVE-2019-17558

CVE-2019-17558 Solr模板注入漏洞图形化一键检测工具。CVE-2019-17558 Solr Velocity Template Vul POC Tool.

Apache Solr 1.4 Injection to get a shell

Vulhub solr/CVE-2019-17558: Apache Solr Velocity Template RCE (CVE-2019-17558), run with Isoloom