Every new exploit,
on the radar.

PoC for popping a system shell against the LnvMSRIO.sys driver

Exploit LnvMSRIO.sys vulnerable driver

PoC to exploit lenovo dispatcher driver (LnvMSRIO.sys) (CVE-2025-8061)

MSRMapper is a manual kernel driver mapper for Windows x64 that abuses CVE-2025-8061 in the vulnerable Lenovo driver LnvMSRIO.sys to perform a BYOVD (Bring You…

My PoC of Lenovo-CVE-2025-8061

GeoServer（CVE-2024-36401/CVE-2024-36404）漏洞利用工具

GeoServer Remote Code Execution

Remote Code Execution (RCE) Vulnerability In Evaluating Property Name Expressions with multies ways to exploit

geoserver CVE-2024-36401漏洞利用工具

CVE-2024-36401 图形化利用工具，支持各个JDK版本利用以及回显、内存马实现

POC for CVE-2024-36401. This POC will attempt to establish a reverse shell from the vlun targets.

POC

Mass scanner for CVE-2024-36401

CVE-2017-11882 from https://github.com/embedi/CVE-2017-11882

Proof-of-Concept exploits for CVE-2017-11882

CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.

PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)

PoC for CVE-2018-0802 And CVE-2017-11882

This is a Metasploit module which exploits CVE-2017-11882 using the POC released here : https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-did…

CVE-2017-11882 exploitation

CVE-2017-11882 File Generator PoC

CVE-2021-4034 1day

Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

Proof of concept for pwnkit vulnerability

Python exploit code for CVE-2021-4034 (pwnkit)

PoC for CVE-2021-4034 dubbed pwnkit

Proof of Concept (PoC) CVE-2021-4034

CVE-2021-4034 Add Root User - Pkexec Local Privilege Escalation

A root exploit for CVE-2022-0847 (Dirty Pipe)

A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.

CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-…

CVE-2022-0847

Container Excape PoC for CVE-2022-0847 "DirtyPipe"

Bash script to check for CVE-2022-0847 "Dirty Pipe"

Linux Kernel Local Privilege Escalation Vulnerability CVE-2022-0847.

CVE-2022-0847

CVE-2024-27198 & CVE-2024-27199 Authentication Bypass --> RCE in JetBrains TeamCity Pre-2023.11.4

Exploit for CVE-2024-27198 - TeamCity Server

CVE-2024-27198 & CVE-2024-27199 PoC - RCE, Admin Account Creation, Enum Users, Server Information

Proof of Concept for Authentication Bypass in JetBrains TeamCity Pre-2023.11.4

is a PoC tool that targets a vulnerability in the TeamCity server (CVE-2024-27198)

Unauthenticated Remote Code Execution – Bricks <= 1.9.6

Nuclei template and information about the POC for CVE-2024-25600

Unauthenticated RCE exploit for CVE-2024-25600 in WordPress Bricks Builder <= 1.9.6. Executes arbitrary code remotely.

This tool is designed to exploit the CVE-2024-25600 vulnerability found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticate…

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE - WordPress Bricks Builder Remote Code Execution (RCE)

Unauthenticated remote code execution vulnerability in WordPress Bricks Builder <= 1.9.6. The template render endpoint accepts PHP code without authentication,…

CVE-2024-25600 - Unauthenticated RCE exploit for WordPress Bricks Builder Theme. Advanced exploitation framework with interactive shell, reverse shells, file u…

Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.

This is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin menti…

CVE-2025-38352 kernel exploit for LG webOS Smart TVs (ARM64). Achieves persistent root on real consumer hardware with novel exploitation techniques. Responsibl…

The official Sentinel Edition v7.11 - Hypervisor Detection & Kernel Memory Audit Suite for Honor Magic V2. Investigating CVE-2025-38352 and EL2 RKP defenses.

PoC and GDB script assists in triggering CVE-2025-38352

Downgrade attack for CVE-2025-48804

n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0)

🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chai…

Proof of Concept: CVE-2026-21858 is vulnerability on n8n where unauthenticated remote attackers can access sensitive files.

Comprehensive vulnerability detection tool for n8n workflow automation instances. Detects the critical CVE-2026-21858 vulnerability (CVSS 10.0) without perform…

Ni8mare, n8n RCE

CVE-2026-21858

POC for CVE-2026-21858

CVE-2025-68613: n8n RCE vulnerability exploit and documentation

🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chai…

Public PoC + Scanner and research for CVE-2025-68613: Critical RCE in n8n Workflow Automation via Expression Injection (CVSS 10.0). Includes detection tools, f…

Detection for CVE-2025-68613

This laboratory provides a controlled environment to analyze and reproduce CVE-2025-68613 in a vulnerable n8n instance.

n8n God Mode Ultimate - CVE-2025-68613 Scanner v1.0.0 ║ ║ Workflow Automation Remote Code Execution

Proof-of-Concept exploit for CVE-2025-68613: Authenticated Remote Code Execution in n8n via Expression Injection

Python Exploit for CVE-2025-68613.

This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921.

Hikvision camera CVE-2017-7921-EXP

海康威视未授权访问检测poc及口令爆破

This tool is a modern evolution of older PoCs like those for CVE-2017-7921 and ICSA-17-124-01, updated for 2025 with live console output, threading for speed, …

Hikvision IP camera access bypass exploit, developed by golang.

Exploit for CVE-2017-7921, targeting the improper authentication vulnerability affecting Hikvision camera systems.

Test For CVE-2017–7921;

CVE-2017-7921-EXP Hikvision camera

Exploit for the CVE-2023-23397

Simple PoC of the CVE-2023-23397 vulnerability with the payload sent by email.

Simple PoC in PowerShell for CVE-2023-23397

Proof of Concept for CVE-2023-23397 in Python

Python script for sending e-mails with CVE-2023-23397 payload using SMTP

CVE-2023-25157 - GeoServer SQL Injection - PoC

GeoServer & GeoTools SQL Injection (CVE-2023-25157 & CVE-2023-25158)

A script, written in golang. POC for CVE-2023-25157

CVE-2023-25157 exp

Geoserver SQL Injection Exploit

GeoServer OGC Filter SQL Injection Vulnerabilities

PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC

[漏洞复现] 全球首款利用PHP默认环境（XAMPP）的CVE-2024-4577 PHP-CGI RCE 漏洞 EXP。

CVE-2024-4577 is a critical vulnerability in PHP affecting CGI configurations, allowing attackers to execute arbitrary commands via crafted URL parameters.

一個測試CVE-2024-4577和CVE-2024-8926的安全滲透工具

POC & $BASH script for CVE-2024-4577

PHP CGI Argument Injection vulnerability

PHP RCE PoC for CVE-2024-4577 written in bash, go, python and a nuclei template

PHP CGI Argument Injection (CVE-2024-4577) RCE

CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC

CVE-2026-67276 MikroTik RouterOS SSH Authentication Bypass Exploit

CVE-2026-67276 - Draft or TODO

Testing tool for the Mikrotrick exploit (CVE-2026-67276)

Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()

CVE-2024–2961 Security Issue Mitigation Script

This script demonstrates a proof-of-concept (PoC) for exploiting a file read vulnerability in the iconv library, as detailed in Ambionics Security's blog https…

CVE-2024-2961 Cnext RCE Exploit with Buddyforms 2.7.7

Quick mitigation script

Exploit for CVE-2023-26326 in the WordPress BuddyForms plugin, leveraging CVE-2024-2961 for remote code execution. This exploit bypasses PHP 8+ deserialization…

Bash script to patch for CVE-2024-2961

PoC for CVE-2023-4911

CVE-2023-4911 proof of concept

Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions.

CVE-2023-4911

Looney Tunables Local privilege escalation (CVE-2023-4911) workshop

https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt

Proof of concept for CVE-2023-4911 (Looney Tunables) discovered by Qualys Threat Research Unit

ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container

Exploits the arbitrary file write bug in proftpd (CVE-2015-3306) attempts code execution

Tool for exploit CVE-2015-3306

ProFTPd 1.3.5 - File Copy

Converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development

An implementation of CVE-2015-3306

This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab.

Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)

This is a proof of concept of the critical WinBox vulnerability (CVE-2018-14847) which allows for arbitrary file read of plain text passwords. The vulnerabili…

MikroTik RouterOS Winbox未经身份验证的任意文件读/写漏洞

PoC of CVE-2018-14847 Mikrotik Vulnerability using simple script

Automated version of CVE-2018-14847 (MikroTik Exploit)

C# implementation of BasuCert/WinboxPoC [Winbox Critical Vulnerability (CVE-2018-14847)]

Mass MikroTik WinBox Exploitation tool, CVE-2018-14847

By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions:

PoC (DoS + scanner) for CVE-2020-0609 & CVE-2020-0610 - RD Gateway RCE

PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610

A proof-of-concept scanner to check an RDG Gateway Server for vulnerabilities CVE-2020-0609 & CVE-2020-0610.

Scanning for Remote Desktop Gateways (Potentially unpatched CVE-2020-0609 and CVE-2020-0610)

BlueGate Exploit validator - RD Gateway validator for CVE-2020-0609 and CVE-2020-0610 (BlueGate) using OpenSSL DTLS over UDP/3391.

Simple customization toolbox, utilizing CVE-2025-24203. Supports iOS 16.0 - iOS 18.3.2.

Slightly improved exploit of the CVE-2025-24203 iOS vulnerability by Ian Beer of Google Project Zero

CVE-2025-24203漏洞

This repository presents a proof-of-concept of CVE-2023-7028

CVE-2023-7028

CVE-2023-7028 killer

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5…

Repository to install CVE-2023-7028 vulnerable Gitlab instance

GitLab CVE-2023-7028

A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

PrintNightmare - Windows Print Spooler RCE/LPE Vulnerability (CVE-2021-34527, CVE-2021-1675) proof of concept exploits

PrintNightmare (CVE-2021-34527) PoC Exploit

CVE-2021-34527 AddPrinterDriverEx() Privilege Escalation

To fight against Windows security breach PrintNightmare! (CVE-2021-34527, CVE-2021-1675)

Workaround for Windows Print Spooler Remote Code Execution Vulnerability(CVE-2021-34527). See: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-3…

This tool calculates tricky canonical huffman histogram for CVE-2023-4863.

A tool for finding vulnerable libwebp(CVE-2023-4863)

Find Electron Apps Vulnerable to CVE-2023-4863 / CVE-2023-5129

Scans an executable and determines if it was wrapped in an Electron version vulnerable to the Chromium vulnerability CVE-2023-4863/ CVE-2023-5129