Every new exploit,
on the radar.

CVE-2023-32233: Linux内核中的安全漏洞

Use-After-Free in Netfilter nf_tables when processing batch requests CVE-2023-32233

自用，poc作者为Piotr Krysiuk，在使用前请先阅读README.md

Gemini 2.5 Pro nf_tables Red Teaming Case Study (CVE-2023-32233) — LLM Safety Alignment & Responsible Disclosure

CVE-2023-32233

A technical case study and timeline dataset documenting Google Gemini 2.5 Pro's safety alignment policies, guardrails, and refusal behavior evolution regarding…

A Linux-related vulnerability

CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH

a signal handler race condition in OpenSSH's server (sshd)

32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc

Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)

MIRROR of the original 32-bit PoC for CVE-2024-6387 "regreSSHion" by 7etsuo/cve-2024-6387-poc

PoC - Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (Scanner and Exploit)

This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports. The script c…

CVE-2024-6387 (regreSSHion) Exploit (PoC), a vulnerability in OpenSSH's server (sshd) on glibc-based Linux systems.

D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie…

POC for Testing the Existence of D(HE)at DOS Attack for (CVE-2002-20001)

SharePoint WebPart Injection Exploit Tool

Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server (CVE-2025-53770)

Scanner for the SharePoint CVE-2025-53770 RCE zero day vulnerability.

POC

ToolShell scanner - CVE-2025-53770 and detection information

CVE-2025-53770 Mass Scanner

A critical zero-auth RCE vulnerability in SharePoint (CVE-2025-53770), now exploited in the wild, building directly on the spoofing flaw CVE-2025-49706.

A sophisticated, wizard-driven Python exploit tool targeting CVE-2025-53770, a critical (CVSS 9.8) unauthenticated remote code execution (RCE) vulnerability in…

Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE

This repository contains a proof-of-concept exploit written in C++ that demonstrates the exploitation of a vulnerability affecting the Windows Error Reporting …

CVE-2023-36874 Proof of Concept

Educational Proof of Concept (PoC) for CVE-2023-36874 — Windows Error Reporting (WER) Local Privilege Escalation vulnerability.

HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907

A REAL DoS exploit for CVE-2022-21907

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers

CVE-2022-21907 Vulnerability PoC

CVE-2022-21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit. Detection and protection: P…

POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability.

PoC for CVE-2021-31166 and CVE-2022-21907

cve-2022-21907

一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密…

CVE-2021-21972 Exploit

Proof of Concept Exploit for vCenter CVE-2021-21972

NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473

CVE-2021-21972

Nmap script to check vulnerability CVE-2021-21972

(CVE-2018-9995) Get DVR Credentials

DVR-Exploiter a Bash Script Program Exploit The DVR's Based on CVE-2018-9995

POC of CVE-2018-9995 written in Rust.

Simple python3 script to automate CVE-2018-9995

CVE-2018-9995_Batch_scanning_exp

Hack The CCTV | DVRs; Credentials Exposed | CVE-2018-9995

DVR系列摄像头批量检测

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection

[ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains. [ProxyShell] CVE-2021…

A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin (…

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

Detect webshells dropped on Microsoft Exchange servers exploited through "proxylogon" group of vulnerabilites (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, …

PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github

CVE-2020-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

HoneyPoC 2.0: Proof-of-Concept (PoC) script to exploit IPv6 (CVE-2020-16898).

PoC BSOD for CVE-2020-16898 (badneighbor)

CVE-2020-16898 Windows TCP/IP远程代码执行漏洞 EXP&POC

A network detection package for CVE-2020-16898 (Windows TCP/IP Remote Code Execution Vulnerability)

PoC BSOD for CVE-2020-16898

CVE-2020-16898 Windows TCP/IP远程代码执行漏洞 EXP&POC

HoneyPoC: Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2000 up to Window…

A denial-of-service proof-of-concept for CVE-2020-1350

NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473

Denial of Service PoC for CVE-2020-1350 (SIGRed)

This Powershell Script is checking if your server is vulnerable for the CVE-2020-1350 Remote Code Execution flaw in the Windows DNS Service

CVE-2020-1350 Proof-of-Concept

Detection of attempts to exploit Microsoft Windows DNS server via CVE-2020-1350 (AKA SIGRed)

Fake exploit tool, designed to rickroll users attempting to actually exploit.

POC for CVE-2022-1388

CVE-2022-1388 F5 BIG-IP RCE 批量检测

F5 BIG-IP RCE exploitation (CVE-2022-1388)

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE

Exploit and Check Script for CVE 2022-1388

PoC for CVE-2022-1388_F5_BIG-IP

K23605346: BIG-IP iControl REST vulnerability CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST RCE

CVE-2024-3400 Palo Alto OS Command Injection

CVE-2024-3400-RCE

CVE-2024-3400

CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect

Global Protec Palo Alto File Write Exploit

CVE-2023-22515: Confluence Broken Access Control Exploit

Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具

Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence

CVE-2023-22515

Confluence Unauthorized Administrator User Addition Exploitation Script

配合 CVE-2023-22515 后台上传jar包实现RCE

Confluence后台rce

Poc for CVE-2023-22515

Exploit script for CVE-2020-7961

Security research on Liferay CE 7.0.3 GA4: pre-auth RCE as root (CVE-2020-7961 class) reproduced end-to-end, plus 16 more findings — 8+ with no known CVE. Agen…

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS)

CVE-2020–7961 Mass exploit for Script Kiddies

LPE exploit for CVE-2024-0582 (io_uring)

is a PoC exploit targeting a specific vulnerability in the Linux kernel (CVE-2024-0582)

Data-only exploit for CVE-2024-0582

A data-only attack based on CVE-2024-0582

CVE-2024-0582 exploit

An exploit for a Use-After-Free vulnerability in the io_uring subsystem in the linux kernel

PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container

RCE against WordPress 4.6; Python port of https://exploitbox.io/vuln/WordPress-Exploit-4-6-RCE-CODE-EXEC-CVE-2016-10033.html

Prevent PHP vulnerabilities similar to CVE-2016-10033 and CVE-2016-10045.

PHPMailer < 5.2.18 Remote Code Execution Exploit

Exploits CVE-2016-10033 and CVE-2016-10045

Code and vulnerable WordPress container for exploiting CVE-2016-10033

To solve CTFS.me problem

LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113

Hi, This is to check targets vulnerable for CVE-2024-49113 in bulk, faster.

FYP: Reproduced CVE-2024-49113 PoC on Windows Server 2019 (ref. SafeBreach); assessed Windows EDR detection gaps and produced ISO 27001-aligned remediation rep…

SafeBreaches CVE-2024-49113 POC(LdapNightmare) Integrated into Metasploit

Reproduction of cve-2024-49113-ldap_nightmare_reproduction

WSUS Unauthenticated RCE

Helps defenders find their WSUS configurations in the wake of CVE-2025-59287

Defensive PoC decoy for CVE-2025-59287 (WSUS) - emulates WSUS endpoints, captures request bodies and metadata, saves evidence for forensic analysis, and provid…

powershell version of hawktrace POC exploit

Working exploit (PoC) for CVE-2025-59287 — WSUS vulnerability. Featured on Vulners and DeepWiki.

Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317

Exploit script written in C# to aid gaining a reverse shell on targets with Windows Server Update Service(WSUS) CVE-2025-59287.

CVE-2025-59287 — Critical unauthenticated RCE in Windows Server Update Services (WSUS) via unsafe deserialization of an AuthorizationCookie, enabling SYSTEM-le…

WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler

CVE Reproduction: cve-2024-49039-task_scheduler_eop_reproduction

RDL的堆溢出导致的RCE

CVE-2024-38077: Remote Code Execution Vulnerability in Windows Remote Desktop Licensing Service

远程探测 remote desktop licensing 服务开放情况，用于 CVE-2024-38077 漏洞快速排查

检测RDL服务是否运行，快速排查受影响资产

CVE-2024-38077,仅支持扫描测试~

CVE-2024-38077，本仓库仅用作备份，

基于135端口检测目标是否存在CVE-2024-38077漏洞

GameOver(lay) Ubuntu Privilege Escalation

GameoverlayFS (CVE-2023-2640 and CVE-2023-32629) exploit in Shell Script tested on Ubuntu 20.04 Kernel 5.4.0

CVE-2023-2640 CVE-2023-32629

Escalating Privilege using CVE-2023-2640 CVE-2023-3262

POC exploits demonstrating OverlayFS-based local privilege escalation vulnerabilities in Ubuntu (CVE-2023-2640 & CVE-2023-3262)

Research implementation demonstrating interaction with Linux eBPF subsystem related to CVE-2021-3490. Includes BPF map creation, syscall wrappers, namespace se…

CVE-2022-30190-follina.py-修改版，可以自定义word模板，方便实战中钓鱼使用。

POC CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina

CVE-2022-30190 Follina POC

Microsoft Office Word Rce 复现(CVE-2022-30190)

Proof of Concept of CVE-2022-30190

This Repository Talks about the Follina MSDT from Defender Perspective

Exploit Microsoft Zero-Day Vulnerability Follina (CVE-2022-30190)

Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files