Every new exploit,
on the radar.

coldfusion exploit based on https://cvedetails.com/cve/CVE-2009-2265/

cf8-upload.py | CVE-2009-2265

Adobe ColdFusion 8 - Remote Command Execution (RCE)

A Rust implementation of the POC for the CVE-2009-2265 exploit, targeting Adobe ColdFusion 8.

posix sh poc for CVE-2009-2265 (deps: curl,msfvenom,uuidgen,tr)

fix for not working exploit script on exploitdb (50057.py)

GeoServer（CVE-2024-36401/CVE-2024-36404）漏洞利用工具

GeoServer Remote Code Execution

Remote Code Execution (RCE) Vulnerability In Evaluating Property Name Expressions with multies ways to exploit

geoserver CVE-2024-36401漏洞利用工具

CVE-2024-36401 图形化利用工具，支持各个JDK版本利用以及回显、内存马实现

POC for CVE-2024-36401. This POC will attempt to establish a reverse shell from the vlun targets.

POC

Mass scanner for CVE-2024-36401

CVE-2017-11882 from https://github.com/embedi/CVE-2017-11882

Proof-of-Concept exploits for CVE-2017-11882

CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.

PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)

PoC for CVE-2018-0802 And CVE-2017-11882

This is a Metasploit module which exploits CVE-2017-11882 using the POC released here : https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-did…

CVE-2017-11882 exploitation

CVE-2017-11882 File Generator PoC

CVE-2026-60004 Pre-Auth RCE Exploit — Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8)

CVE-2026-60004

CVE-2026-60004

Gitea diffpatch RCE (CVE-2026-60004) PoC - repo-write to RCE as Gitea service account

CVE-2026-60004 — Gitea Pre-Auth RCE via diffpatch hook injection

Gitea diffpatch RCE

CVE-2026-60004 — Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone → post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1

CVE-2021-4034 1day

Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

Proof of concept for pwnkit vulnerability

Python exploit code for CVE-2021-4034 (pwnkit)

PoC for CVE-2021-4034 dubbed pwnkit

Proof of Concept (PoC) CVE-2021-4034

CVE-2021-4034 Add Root User - Pkexec Local Privilege Escalation

A root exploit for CVE-2022-0847 (Dirty Pipe)

A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.

CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-…

CVE-2022-0847

Container Excape PoC for CVE-2022-0847 "DirtyPipe"

Bash script to check for CVE-2022-0847 "Dirty Pipe"

Linux Kernel Local Privilege Escalation Vulnerability CVE-2022-0847.

CVE-2022-0847

CVE-2024-27198 & CVE-2024-27199 Authentication Bypass --> RCE in JetBrains TeamCity Pre-2023.11.4

Exploit for CVE-2024-27198 - TeamCity Server

CVE-2024-27198 & CVE-2024-27199 PoC - RCE, Admin Account Creation, Enum Users, Server Information

Proof of Concept for Authentication Bypass in JetBrains TeamCity Pre-2023.11.4

is a PoC tool that targets a vulnerability in the TeamCity server (CVE-2024-27198)

CVE-2019-9053 Exploit for Python 3

The exploit is edited to work with different text encodings and Python 3 and is compatible with CMSMS version 2.2.9 and below.

This script is a modified version of the original exploit by Daniele Scanu which exploits an unauthenticated SQL injection vulnerability in CMS Made Simple <= …

Python3-converted exploit and research notes for CMS Made Simple (CVE-2019-9053) — Unauthenticated SQL Injection vulnerability. Includes original PoC, improved…

This is modified code of 46635 exploit from python2 to python3.

Unauthenticated Remote Code Execution – Bricks <= 1.9.6

Nuclei template and information about the POC for CVE-2024-25600

Unauthenticated RCE exploit for CVE-2024-25600 in WordPress Bricks Builder <= 1.9.6. Executes arbitrary code remotely.

This tool is designed to exploit the CVE-2024-25600 vulnerability found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticate…

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE - WordPress Bricks Builder Remote Code Execution (RCE)

Unauthenticated remote code execution vulnerability in WordPress Bricks Builder <= 1.9.6. The template render endpoint accepts PHP code without authentication,…

CVE-2024-25600 - Unauthenticated RCE exploit for WordPress Bricks Builder Theme. Advanced exploitation framework with interactive shell, reverse shells, file u…

Breaking git with a carriage return and cloning RCE

PoC for CVE-2025-48384

PoC dockerfile image for CVE-2025-48384

CVE-2025-48384 PoC

A proof of concept of remote code execution

for CVE-2025-48384 test

Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.

This is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin menti…

CVE-2025-38352 kernel exploit for LG webOS Smart TVs (ARM64). Achieves persistent root on real consumer hardware with novel exploitation techniques. Responsibl…

The official Sentinel Edition v7.11 - Hypervisor Detection & Kernel Memory Audit Suite for Honor Magic V2. Investigating CVE-2025-38352 and EL2 RKP defenses.

PoC and GDB script assists in triggering CVE-2025-38352

Exploitation Training -- CVE-2013-2028: Nginx Stack Based Buffer Overflow

For the analysis of CVE-2013-2028

CVE-2013-2028 python exploit

this is not stable

A CVE-2013-2028 implementation

CVE-2013-2028复现

Tool for checking Nginx CVE-2013-2028

Mitigation scripts for CVE-2026-50751

CVE-2026-50751

PoC de CVE-2026-50751: bypass de autenticacion IKEv1 en Check Point Remote/Mobile Access.

A web version of the bash scripts wrote for Check Point CVE-2026-50751 and CVE-2026-50752. This uses a local server to scan and make changes using Check Point…

Bypass de autenticación por certificado en la VPN Remote-Access de Check Point (IKEv1).

CVE-2026-50751 Check Point IKEv1 vulnerability scanner

IKEv1 VPN scanners, attempts a Check Point authentication-bypass exploit, and includes internal network scanning and reverse-shell features.

A proof of concept for CVE-2023–1326 in apport-cli 2.26.0

Esto es una prueba de concepto propia i basica de la vulneravilidad CVE-2023-1326

A comprehensive technical walkthrough detailing the compromise of the Devvortex machine on HackTheBox. This path demonstrates Subdomain Fuzzing, Joomla API Enu…

CVE-2022-38181 POC for FireTV 2nd gen Cube (raven)

Owning a tablet Amazon kept shutting down — CVE-2022-38181 write-up, four AI models, and a blog

CVE-2022-38181 POC for FireTV 3rd gen Cube (gazelle)

FireOS 7.3.3.1 temp root by CVE-2022-38181

n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0)

🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chai…

Proof of Concept: CVE-2026-21858 is vulnerability on n8n where unauthenticated remote attackers can access sensitive files.

Comprehensive vulnerability detection tool for n8n workflow automation instances. Detects the critical CVE-2026-21858 vulnerability (CVSS 10.0) without perform…

Ni8mare, n8n RCE

CVE-2026-21858

POC for CVE-2026-21858

CVE-2025-68613: n8n RCE vulnerability exploit and documentation

🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chai…

Public PoC + Scanner and research for CVE-2025-68613: Critical RCE in n8n Workflow Automation via Expression Injection (CVSS 10.0). Includes detection tools, f…

Detection for CVE-2025-68613

This laboratory provides a controlled environment to analyze and reproduce CVE-2025-68613 in a vulnerable n8n instance.

n8n God Mode Ultimate - CVE-2025-68613 Scanner v1.0.0 ║ ║ Workflow Automation Remote Code Execution

Proof-of-Concept exploit for CVE-2025-68613: Authenticated Remote Code Execution in n8n via Expression Injection

Python Exploit for CVE-2025-68613.

🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information Disclosure & Memory Leak Diagnostic).

PoC de CVE-2026-20805: divulgacion de informacion en Desktop Window Manager (dwm.exe) de Windows.

The PoC of information disclosure in Microsoft Desktop Windows Management.

### 📡 Theoretical Classification **ID:** SCTT-2026-33-0002 **Researcher:** Americo Simoes (SimoesCTT) **Physics:** Theorem 4.2 - Turbulent Phase Transition…

CVE‑2026‑20805: A Windows Desktop Window Manager flaw causing local information disclosure. Requires low privileges, no user interaction. Rated CVSS 5.5 (Mediu…

Microsoft just patched CVE-2026-20805 and CVE-2026-20871 in January 2026 to stop "Information Disclosure" and "Use-After-Free" bugs in DWM. They think they've …

This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921.

Hikvision camera CVE-2017-7921-EXP

海康威视未授权访问检测poc及口令爆破

This tool is a modern evolution of older PoCs like those for CVE-2017-7921 and ICSA-17-124-01, updated for 2025 with live console output, threading for speed, …

Hikvision IP camera access bypass exploit, developed by golang.

Exploit for CVE-2017-7921, targeting the improper authentication vulnerability affecting Hikvision camera systems.

Test For CVE-2017–7921;

CVE-2017-7921-EXP Hikvision camera

Exploit for the CVE-2023-23397

Simple PoC of the CVE-2023-23397 vulnerability with the payload sent by email.

Simple PoC in PowerShell for CVE-2023-23397

Proof of Concept for CVE-2023-23397 in Python

Python script for sending e-mails with CVE-2023-23397 payload using SMTP

CVE-2025-3248 Langflow RCE Exploit

A vulnerability scanner for CVE-2025-3248 in Langflow applications. 用于扫描 Langflow 应用中 CVE-2025-3248 漏洞的工具。

Remote Code Execution Exploit for Langflow (CVE-2025-3248) - [ By S4Tech ]

POC of CVE-2025-3248, RCE of LangFlow

Mass-CVE-2025-3248

Langflow Remote Code Execution

A comprehensive Python exploitation framework for testing and demonstrating CVE-2025-3248, a critical unauthenticated remote code execution vulnerability in La…

Unauthenticated RCE in Open Web Analytics (OWA) 1.7.3

Open Web Analytics (OWA) - Unauthenticated Remote Code Execution

FIxed exploit for CVE-2022-24637 (original xplt: https://www.exploit-db.com/exploits/51026)

Open Web Analytics 1.7.3 - Remote Code Execution

Unauthenticated RCE in Open Web Analytics version <1.7.4

Open Web Analytics 1.7.3 - Remote Code Execution Exploit v2

PoC for CVE-2026-66066 in Ruby on Rails

CVE-2026-66066 + File Read, RCE, Scanner, Lab

CVE-2026-66066 (KindaRails2Shell) PoC - Rails Active Storage/libvips arbitrary file read to RCE; for authorized security testing

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell: Rails Active Storage/libvips Arbitrary File Read → RCE. MATLAB/HDF5 dual-identity file → SECRET_KEY_BASE theft → forged vari…

CVE-2026-20253

CVE-2026-20253 - Splunk Enterprise

PoC de CVE-2026-20253: RCE pre-autenticacion en Splunk Enterprise.

POC for CVE-2026-20253

CVE-2023-25157 - GeoServer SQL Injection - PoC

GeoServer & GeoTools SQL Injection (CVE-2023-25157 & CVE-2023-25158)

A script, written in golang. POC for CVE-2023-25157

CVE-2023-25157 exp

Geoserver SQL Injection Exploit

GeoServer OGC Filter SQL Injection Vulnerabilities