Every new exploit,
on the radar.

SambaCry exploit and vulnerable container (CVE-2017-7494)

Remote root exploit for the SAMBA CVE-2017-7494 vulnerability

Proof-of-Concept exploit for CVE-2017-7494(Samba RCE from a writable share)

CVE-2017-7494 - Detection Scripts

It is a simple script to exploit RCE for Samba (CVE-2017-7494 ).

SambaCry (CVE-2017-7494) exploit for Samba | bind shell without Metasploit

CVE-2017-7494 python exploit

Exploit CVE-2017-7494 for Net Security course final Assignment. This would reveal the vulnerability of services that run in administrative priority on Linux.

PoC exploit of CVE-2020-11651 and CVE-2020-11652

Salt security backports for CVE-2020-11651 & CVE-2020-11652

CVE-2020-11651: Proof of Concept

CVE-2020-11651&&CVE-2020-11652 EXP

Checks for CVE-2020-11651 and CVE-2020-11652

PoC for CVE-2020-11651

CVE-2020-11651&&CVE-2020-11652 EXP

CVE-2019-5418 - File Content Disclosure on Ruby on Rails

RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420)

A multi-threaded Golang scanner to identify Ruby endpoints vulnerable to CVE-2019-5418

File Content Disclosure on Rails Test Case - CVE-2019-5418

a demo for Ruby on Rails CVE-2019-5418

Ruby on Rails是一个 Web 应用程序框架,是一个相对较新的 Web 应用程序框架，构建在 Ruby 语言之上。这个漏洞主要是由于Ruby on Rails使用了指定参数的render file来渲染应用之外的视图，我们可以通过修改访问某控制器的请求包，通过“…/…/…/…/”来达到路径穿越的目的，然后再…

Rails 3 PoC of CVE-2019-5418

Exploit for CVE-2019-11043

(PoC) Python version of CVE-2019-11043 exploit by neex

php-fpm+Nginx RCE

Ladon POC Moudle CVE-2019-11043 (PHP-FPM + Ngnix)

CVE-2019-11043 PHP7.x RCE

This repository provides a dockerized infrastructure and a python implementation of the CVE-2019-11043 exploit.

Docker image and commands to check CVE-2019-11043 vulnerability on nginx/php-fpm applications.

A checker (site and tool) for CVE-2014-0160

Multi-threaded tool for scanning many hosts for CVE-2014-0160.

OpenSSL CVE-2014-0160 Heartbleed vulnerability test

Heartbleed (CVE-2014-0160) client exploit

Test for SSL heartbeat vulnerability (CVE-2014-0160)

OpenSSL Heartbleed (CVE-2014-0160) vulnerability scanner, data miner and RSA key-restore tools.

:broken_heart: Hearbleed exploit to retrieve sensitive information CVE-2014-0160 :broken_heart:

OpenSSL TLS heartbeat read overrun (CVE-2014-0160)

Exploit written in Python for CVE-2018-15473 with threading and export formats

OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).

Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473

OpenSSH 2.3 < 7.7 - Username Enumeration

OpenSSH 7.7 - Username Enumeration

SSH User Enumerator in Python3, CVE-2018-15473, I updated the code of this exploit (https://www.exploit-db.com/exploits/45939) to work with python3 instead of …

CVE-2018-15473 - Opensshenum is an user enumerator exploiting an OpenSsh bug

CVE-2018-15473 Exploit

rce

Openfire Console Authentication Bypass Vulnerability with RCE plugin

Perform With Massive Openfire Unauthenticated Users

CVE-2023-32315-Openfire-Bypass

Tool for CVE-2023-32315 exploitation

Openfire未授权到RCE(CVE-2023-32315)复现

CVE-2019-10758

Vulhub mongo-express/CVE-2019-10758: mongo-express Remote Code Execution (CVE-2019-10758), run with Isoloom

Spawn to shell without any credentials by using CVE-2018-10933 (LibSSH)

Script to identify hosts vulnerable to CVE-2018-10933

CVE-2018-10933 very simple POC

cve-2018-10933 libssh authentication bypass

libssh CVE-2018-10933

Leveraging it is a simple matter of presenting the server with the SSH2_MSG_USERAUTH_SUCCESS message, which shows that the login already occurred without a pr…

LibSSH Authentication Bypass Exploit using RCE

Hunt for and Exploit the libSSH Authentication Bypass (CVE-2018-10933)

exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts

kibana < 6.6.0 未授权远程代码命令执行 (Need Timelion And Canvas),CVE-2019-7609

RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer

Kibana <6.6.0 RCE written in python3

Kibana Prototype Pollution

Exploit for CVE-2019-7609 in python

CVE-2024-23897

CVE-2024-23897 - Jenkins 任意文件读取 利用工具

CVE-2024-23897 | Jenkins <= 2.441 & <= LTS 2.426.2 PoC and scanner.

Proof of concept for CVE-2024-23897: Jenkins arbitrary file read

Nuclei template for CVE-2024-23897 (Jenkins LFI Vulnerability)

This repository presents a proof-of-concept of CVE-2024-23897

CVE-2024-23897 jenkins-cli

CVE-2017-12149 jboss反序列化 可回显

CVE-2017-12149 JBOSS as 6.X反序列化(反弹shell版)

CVE-2017-12149 JBOSS RCE (TESTED)

Jboss Java Deserialization RCE (CVE-2017-12149)

JBoss CVE-2017-12149 (Insecure Deserialization - RCE) Exploitation Lab.

Update of https://github.com/1337g/CVE-2017-12149 to work with python3

CVE-2022-44268 ImageMagick Arbitrary File Read - Payload Generator

A PoC for the CVE-2022-44268 - ImageMagick arbitrary file read

ImageMagick LFI PoC [CVE-2022-44268]

CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit

PoC of Imagemagick's Arbitrary File Read

The vulnerable recurrence docker environment for CVE-2022-44268

Imagemagick CVE-2022-44268

Detect images that likely exploit CVE-2022-44268

High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)

Explanation and full RCE PoC for CVE-2025-55182

Original Proof-of-Concepts for React2Shell CVE-2025-55182

CVE-2025-55182 POC

Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.

RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478

React Shell & Next.js RSC Exploit Tool (CVE-2025-55182)

CVE-2021-41773 playground

CVE-2021-41773 CVE-2021-42013漏洞批量检测工具

Apache2 2.4.49 - LFI & RCE Exploit - CVE-2021-41773

A framework for bug hunting or pentesting targeting websites that have CVE-2021-41773 Vulnerability in public

Tool check: CVE-2021-41773, CVE-2021-42013, CVE-2020-17519

CVE-2021-41773 Path Traversal vulnerability in Apache 2.4.49.

Grafana Unauthorized arbitrary file reading vulnerability

A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key / decrypt data_source …

This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability (CVE-2021-43798).

CVE-2021-43798 - Grafana 8.x Path Traversal (Pre-Auth)

Grafana Arbitrary File Reading Vulnerability

CVE-2021-43798:Grafana 任意文件读取漏洞

grafana CVE-2021-43798任意文件读取漏洞POC，采用多插件轮训检测的方法，允许指定单URL和从文件中读取URL

CVE-2021-43798 Grafana 任意文件读取漏洞 POC+参数

CVE-2021-22205& GitLab CE/EE RCE

GitLab CE/EE Preauth RCE using ExifTool

Pocsuite3 For CVE-2021-22205

CVE-2021-22205 Unauthorized RCE

CVE-2021-22205 Gitlab 未授权远程代码执行漏洞 EXP, 移除了对djvumake & djvulibre的依赖，可在win平台使用

CVE-2021-22205 RCE

CVE-2021-22205 检测脚本,支持getshell和命令执行

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

💀Proof-of-Concept for CVE-2018-7600 Drupal SA-CORE-2018-002

Exploit for Drupal 7 <= 7.57 CVE-2018-7600

CVE-2018-7600 Drupal RCE

CVE-2018-7600 - Drupal 7.x RCE

Exploit for CVE-2018-7600.. called drupalgeddon2,

CVE-2018-7600 POC (Drupal RCE)

CVE-2018-7600 Drupal Drupalgeddon 2 远程代码执行漏洞利用脚本

PoC for CVE-2022-34265 (Django)

PoC for CVE-2022-34265

CVE-2022-34265 Vulnerability

Vulhub django/CVE-2022-34265: Django Trunc and Extract SQL Injection (CVE-2022-34265), run with Isoloom

Shellshock exploit + vulnerable environment

Python Scanner for "ShellShock" (CVE-2014-6271)

Vulnerability as a service: showcasing CVS-2014-6271, a.k.a. Shellshock

Shellshock exploit aka CVE-2014-6271

shellshock CVE-2014-6271 CGI Exploit, Use like Openssh via CGI

A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server

Android app to scan for bash Vulnerability - CVE-2014-6271 also known as Shellshock

Patch for CVE-2014-6271

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-Ultra…

Apache Druid 远程代码执行;检测脚本

Apache Druid remote code execution vulnerability - Apache Druid 远程代码执行漏洞利用 CVE-2021-25646

CVE-2021-25646 Apache Druid 远程代码执行 漏洞检测和利用工具

CVE-2021-25646 Apache Druid 远程代码执行漏洞 Wker脚本

CSharp CVE-2021-25646-GUI

Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)

Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)

ActiveMQ RCE (CVE-2023-46604) 回显利用工具

CVE-2023-46604

This script leverages CVE-2023046604 (Apache ActiveMQ) to generate a pseudo shell. The vulnerability allows for remote code execution due to unsafe deserializa…

CVE-2023-46604 Apache ActiveMQ RCE exp 基于python

Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.

proof of concept CVE-2021-1931 exploit for the blackberry key2 (le) that allows to flash unsigned images temporarily

My take on unlocking Xperia 5 SO-01M for p42 bootloader using CVE-2021-1931

BlackBerry KEY2 (BBF100-6) bootloader unlock (CVE-2021-1931), unlock-tool RE, recon, and LineageOS research

【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87…

CVE-2022-26134 Proof of Concept

Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)

CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL injection

Atlassian Confluence (CVE-2022-26134) - Unauthenticated Remote code execution (RCE)

[CVE-2022-26134]Confluence OGNL expression injected RCE with sandbox bypass.

Simple Honeypot for Atlassian Confluence (CVE-2022-26134)

wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain

CVE-2026-63030 + CVE-2026-60137 exploit RCE chain

CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core

CVE-2026-63030, CVE-2026-60137, wp2shell scanner

Non-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST /batch/v1 route confusion + CVE-2026-60137 author__not_in SQLi) in WordPress core 6.9.0…

WP2Shell - CVE-2026-63030 / CVE-2026-60137 This tool exploits a critical SQL injection vulnerability in the WordPress REST API `/wp-json/batch/v1` endpoint, al…

Pre-auth RCE PoC for CVE-2026-63030 / CVE-2026-60137 (WordPress core)

Educational PoC + lab for CVE-2026-63030 + CVE-2026-60137: pre-auth SQLi in WordPress core via REST batch-route confusion