Every new exploit,
on the radar.

:poodle: Poodle (Padding Oracle On Downgraded Legacy Encryption) attack CVE-2014-3566 :poodle:

CloudPassage Halo policy for detecting vulnerability to CVE-2014-3566 (AKA POODLE)

Test code for poodle attack (CVE-2014-3566)

Vibe coded POC of exploitation of the POODLE CVE-2014-3566

Auditoría de seguridad y análisis de vulnerabilidades (CVE-2014-3566 y CVE-2010-2333) en la infraestructura de red local y router residencial.

iOS 15.1 kernel exploit POC for CVE-2021-30955

CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM devices (A14-A15)

A test app to check if your device is vulnerable to CVE-2021-30955

https://gist.github.com/jakeajames/37f72c58c775bfbdda3aa9575149a8aa compiled into a ipa 15.0-15.2b1

Jake Jame's proof of concept wrapped into an iOS app for CVE-2021-30955

Clone from gist

desc_race exploit for iOS 15.0 - 15.1.1 (with stable kernel r/w primitives) (CVE-2021-30955)

Windows LPE exploit for CVE-2022-37969

Tutorial of CVE-2022-37969 with focus on the methodology of Kernel exploitation, not CVE's internal causes

CVE-2022-37969 poc

GitLab CVE-2023-2825 PoC. This PoC leverages a path traversal vulnerability to retrieve the /etc/passwd file from a system running GitLab 16.0.0.

PoC for CVE-2023-2825: automated GitLab 16.0.0 arbitrary file read via nested public groups, project upload traversal, reusable upload paths, and clean CLI out…

the proof of concept written in Python for an unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when …

On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition (CE) and Enterprise Edition…

CVE-2023-2825 exploit script

Exploiting CVE-2023-2825 on a VM

Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-20…

Checker and fixer for all 13 vulnerabilities in the Next.js May 2026 security release (CVE-2026-23870)

Exploit for CVE-2022-27666

There are 2 exploitation methods that exploit CVE-2022-27666. For more info on how to use these code bases please check my blog.

PoC for CVE-2024-48990

Testing POC for use cases

Automated local privilege escalation exploit for CVE-2024-48990 (needrestart v3.7), leveraging PYTHONPATH hijacking to gain root access.

Exploit for CVE-2024-48990 (Local Privilege Escalation in needrestart < 3.8)

My exploit for CVE-2024-48990. Full details of how I made this are on my blog.

Exploit for CVE-2024-48990 - Privilege Escalation in Needrestart 3.7-3. For eductional purposes only

My take on the needrestart Python CVE-2024-48990

an exploit for CVE-2024-48990 ( Local Privilege Escalation ) in needrestart

Time Based SQL Injection in Zabbix Server Audit Log --> RCE

This is my exploit for CVE-2024-22120, which involves an SSRF vulnerability inside an XXE with a Gopher payload.

This exploit was created to exploit an XXE (XML External Entity). Through it, I read the backend code of the web service and found an endpoint where I could us…

Proof-of-concept exploit for CVE-2024-22120 that leverages time-based SQL injection and gopher-based SSRF to achieve remote code execution on vulnerable Zabbix…

Master's Thesis research on CVE-2024-30051 (Windows DWM Heap Overflow). Features a high-reliability exploit with automated heap spray optimization, real-time l…

CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS. Exploitation bypas…

CVE-2025-31200 - @Noahhw46 figured it out

IOS audio buffer overflow CVE-2025-31200 POC

Public disclosure of CVE-2025-31200 – Zero-click RCE in iOS 18.X via AudioConverterService and malicious audio file.

D-Link NAS CVE-2024-3273 Exploit Tool

Exploit for CVE-2024-3273, supports single and multiple hosts

D-Link NAS Command Execution Exploit

Quick and dirty honeypot for CVE-2024-3273

Turvanõrkuse CVE 2024 3273 analüüs: D-Link seadmete käsusüst

CVE-2024-3273 - D-Link Remote Code Execution (RCE)

CVE-2024-3273 — Authorized Penetration Test Report D-Link DNS-320L NAS | Client: Otonata

Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640

Check for CVE-2023-32629 "GameOver(lay)" vulnerability

One-Liner CVE-2023-32629/CVE-2023-2640 Ubuntu Privilege Escalation

CVE-2023-32629 & CVE-2023-2640 Ubuntu Privilege Escalation POC

OverlayFS Local Privilege Escalation - Full write-up to full escalation

Proof of Concept demonstrating Remote Code Execution through insecure deserialization in Roundcube (CVE-2025-49113).

💥 Python Exploit for CVE-2025-49113 | Roundcube Webmail RCE via PHP Object Injection

Proof-of-concept to CVE-2025-49113

Detection for CVE-2025-49113

POC of CVE-2025-49113

CVE-2025-49113 - Roundcube <= 1.6.10 Post-Auth RCE via PHP Object Deserialization

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Recreation of the SharePoint PoC for CVE-2023-29357 in C# from LuemmelSec

A Python script that verifies whether a target is vulnerable to CVE-2023-29357 or not

Event ID 189 Rule Name SOC227 Microsoft SharePoint Server Elevation of Privilege Possible CVE-2023-29357 .. Exploitation

PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)

A PoC for CVE-2020-0601

CVE-2020-0601 #curveball - Alternative Key Calculator

Proof of Concept for CVE-2020-0601

Zeek package to detect CVE-2020-0601

这资源是作者复现微软签字证书漏洞CVE-2020-0601，结合相关资源及文章实现。推荐大家结合作者博客，理解ECC算法、Windows验证机制，并尝试自己复现可执行文件签名证书和HTTPS劫持的例子。作为网络安全初学者，自己确实很菜，但希望坚持下去，加油！

PoC for CVE-2020-0601 - CryptoAPI exploit

Zeek package that uses OpenSSL to detect CVE-2020-0601 exploit attempts

Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)

NEW EXPLOIT FOR TP LINK

TP-Link Router Authenticated RCE Exploit (CVE-2022-30075) Bu araç, TP-Link Archer AX50 ve bazı diğer TP-Link router modellerinde bulunan **CVE-2022-30075** gü…

针对JWT渗透开发的漏洞验证/密钥爆破工具，针对CVE-2015-9235/空白密钥/未验证签名攻击/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042的结果生成用于FUZZ，也可使用字典/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)

This repository contains the POC of an exploit for node-jose < 0.11.0

Exploitation of a vulnerability in Cisco's node-jose, a JavaScript library created to manage JWT.

Exploit for Node-jose < 0.11.0 written in Ruby

python2.7 script for JWT generation

POC for CVE-2018-0114 written in Go

Professional JWT security testing toolkit. Analyze, crack, forge, and exploit JSON Web Tokens with 15+ vulnerability checks, 100k secret wordlist, and CVE-spec…

LPE PoC of a user-after-free vulnerability in the Linux netfilter subsystem.

CVE-2022-32250-LPE

My exploit for CVE-2022-32250 for linux kernel 5.18

Reproduce CVE-2022-32250 and CVE-2025-21756 by tampering with modprobe_path and hijacking control flow, respectively.

Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit!

CVE-2025-21756: Attack of the Vsock

Reproduce CVE-2022-32250 and CVE-2025-21756 by tampering with modprobe_path and hijacking control flow, respectively.

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

Search for BTC coins on earlier versions of Bitcoin Core with critical vulnerability OpenSSL 0.9.8 CVE-2008-0166

Private keys vulnerable to Debian OpenSSL bug (CVE-2008-0166)

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

Example script demonstrating a weak PRNG, CVE-2008-0166

A professional Python tool designed for educational penetration testing, demonstrating SSH vulnerabilities (CVE-2008-0166 / CVE-2008-1657) with interactive she…

SSH Exploit Tool (Educational Use Only) 📌 Description This tool demonstrates exploitation of: CVE-2008-0166 CVE-2008-1657 It connects to vulnerable SSH servi…

Unsigned driver loader using CVE-2018-19320

Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)

CVE-2018-19320 LPE Exploit

An exploit for Apache Struts CVE-2017-9805

CVE 2017-9805

Better Exploit Code For CVE 2017 9805 apache struts

Exploit script for Apache Struts2 REST Plugin XStream RCE (‎CVE-2017-9805)

An exploit for Apache Struts CVE-2017-9805

cve -2017-9805

CVE-2017-9805 POC

CVE-2017-9805 - Exploit

CVE-2022-21449 Proof of Concept demonstrating its usage with a client running on a vulnerable Java version and a malicious TLS server

Zeek script to detect exploitation attempts of CVE-2022-21449 targeting TLS clients

CVE-2022-21449 Vulnerability tester

Reappear-CVE-2022-21449-TLS-PoC

Professional JWT security testing toolkit. Analyze, crack, forge, and exploit JSON Web Tokens with 15+ vulnerability checks, 100k secret wordlist, and CVE-spec…

Demos the Psychic Signatures vulnerability (CVE-2022-21449)

Test tool to demonstrate the vulnerability of CVE-2022-21449

Exploit PoC for CVE-2024-32002

CVE-2024-32002 RCE PoC

Hook for the PoC for exploiting CVE-2024-32002

local poc for CVE-2024-32002

Este script demuestra cómo explotar la vulnerabilidad CVE-2024-32002 para obtener una reverse shell, proporcionando acceso remoto al sistema afectado. Úselo co…

PoC of CVE-2024-32002 - Remote Code Execution while cloning special-crafted local repositories