Every new exploit,
on the radar.

CVE-2015-1805 root tool

AndroRAT is a capability that can be used to inject a root exploit as a silent installation to perform a malicious task on the device. This AndroRAT is designe…

HP Slate 7 2800 Android 4.1.1 rooting kit using CVE-2015-1805.

A root tool based on the [CVE-2015-1805 vulnerability](https://access.redhat.com/security/cve/cve-2015-1805) It supports 32 and 64bit, get sys call table addr…

Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)

A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.

Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.

Telerik CVE-2017-9248 Vulnerability Scanner

Exploit CVE-2017-9248 Telerik ReMix from Paul Taylor's script. Exploit Telerik lastest version fixed vuln. ReMix by TinoKa & Shaco JX

Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)

Generate malicious files using recently published bidi-attack (CVE-2021-42574)

Checks your files for existence of Unicode BIDI characters which can be misused for supply chain attacks. See CVE-2021-42574

Scan code for invisible bidirectional Unicode characters (Trojan Source attack prevention, CVE-2021-42574)

Research-only AI watermark & provenance robustness toolkit: local reverse proxy (OpenAI/Anthropic/Gemini) + CLI stripping C2PA/EXIF/XMP, zero-width & homoglyph…

POC of CVE-2021-42574 for solidity and solc compiler

Code for veracode blog

SnakeYAML-CVE-2022-1471-POC

SnakeYAML CVE-2022-1471 exploit payload for demo

attacker

Sentinel demo: transitive snakeyaml CVE-2022-1471 via Spring Boot + exploitable code pattern

SnakeYAML CVE-2022-1471 exploit payload for Seal Security demos

CVE-2019-1040 with Exchange

an impacket-dependent script exploiting CVE-2019-1040

CVE-2019-1040 with Kerberos delegation

Updated version for the tool UltraRealy with support of the CVE-2019-1040 exploit

The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.

Pure Nim implementation for exploiting CVE-2021-36934, the SeriousSAM local privilege escalation

PoC for CVE-2021-36934, which enables a standard user to be able to retrieve the SAM, Security, and Software Registry hives in Windows 10 version 1809 or newer

Fix for the CVE-2021-36934

HiveNightmare a.k.a. SeriousSam Local Privilege Escalation in Windows – CVE-2021-36934

Small and dirty PoC for CVE-2021-36934

PoC for CVE-2021-36934 Aka HiveNightmare/SeriousSAM written in python3

HiveNightmare aka SeriousSAM

Detection and Mitigation script for CVE-2021-36934 (HiveNightmare aka. SeriousSam)

Original PoC for CVE-2023-32784

KeePass 2.X dumper (CVE-2023-32784)

This script complements the results obtained through the keepass-password-dumper tool when exploiting the CVE-2023-32784 vulnerability affecting KeePass.

KeePass Master Password Extraction PoC for Linux

Re-write of original KeePass 2.X Master Password Dumper (CVE-2023-32784) POC in python.

Retrieve the master password of a keepass database <= 2.53.1

year 2 semester 1 Systems and Network Programming Assignment

From SQL injection to root shell with CVE-2016-6662 by MaYaSeVeN

0ldSQL_MySQL_RCE_exploit.py (ver. 1.0) (CVE-2016-6662) MySQL Remote Root Code Execution / Privesc PoC Exploit For testing purposes only. Do no harm.

Simple ansible playbook to patch mysql servers against CVE-2016-6662

MySQL server CVE-2016-6662 patch playbook

research CVE-2016-6662

PoC exploit for GLPI - Command injection using a third-party library script

Unauthenticated RCE in GLPI 10.0.2

Modified for GLPI Offsec Lab: call_user_func, array_map, passthru

Script in Ruby for the CVE-2022-35914 - RCE in GLPI

A self-contained testbed for Django CVE-2025-64459. Demonstrates QuerySet.filter() parameter injection via dictionary expansion using Docker.

Vulnerability: SQL Injection via QuerySet and Q() keyword argument unpacking. CVE ID: CVE-2025-64459 Severity: Critical (CVSS 9.1) Affected Versions: Django 5.…

check if vulnerable python-django version to CVE-2025-64459 bug

CVE-2025-64459-hunter

demo application showing off SQL Injection exploit in django 5.2.7

Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)

CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839

CVE-2023-21839工具

CVE-2023-21839 Python版本

Reproducible Docker lab for CVE-2024-21182 — Oracle WebLogic T3/IIOP OpaqueReference JNDI injection → unauthenticated RCE (CVE-2023-21839 patch-bypass family).…

A testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432

Detect, assess, and respond to supply chain attacks across npm/yarn and Python (pip/poetry/uv). Claude Code skill + standalone scripts. Built during axios RAT …

Starlette Host-Header URL Confusion Lab (X41-2026-002) - CVE-2026-48710

Detection scanner for CVE-2026-48710 - Host-header auth bypass in Starlette/FastAPI

OXDEV-77637 repro fixture: uv workspace whose transitive CVE (starlette 0.25.0 / CVE-2026-48710) is dropped when the lean clone omits workspace-member pyprojec…

CVE-2026-48710漏洞验证代码

CVE-2023-0386在ubuntu22.04上的提权

CVE-2023-0386 analysis and Exp

Vulnerabilities Exploitation On Ubuntu 22.04

非常简单的CVE-2023-0386's exp and analysis.Use c and sh.

CVE-2023-0386 EXP

A critical security vulnerability, identified as CVE-2023-50164 (CVE: 9.8) was found in Apache Struts, allowing attackers to manipulate file upload parameters …

Proof of Concept for Path Traversal in Apache Struts ("CVE-2023-50164")

Vulnerable docker container for Apache Struts 2 RCE CVE-2023-50164

A scanning utility and PoC for CVE-2023-50164

Vulnerable docker container for Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass CVE-2023-50164

CVE-2023-50164 (Apache Struts path traversal to RCE vulnerability) - Proof of Concept

A detailed walkthrough of Billing room exploiting CVE-2023-30258 and escalating via fail2ban misconfig

Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.

POC for CVE-2023-30258-RCE by n0o0b

Unauthenticated command injection vulnerability in Magnus Billing v7.3.0.

There are Exploit for Magnus Billing v7 system get root privilages

Stack-based buffer overflow in Sync Breeze Enterprise 10.0.28 reachable through the /login handler, demonstrating how unchecked input length can corrupt stack …

Study of a classic stack-based buffer overflow vulnerability in a controlled lab environment for educational purposes.

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login.

STACK BUFFER OVERFLOW EXPLOIT RESULTING IN REMOTE CODE EXECUTION

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login

CVE-2017-14980 python exploit

CVE-2023-32233: Linux内核中的安全漏洞

Use-After-Free in Netfilter nf_tables when processing batch requests CVE-2023-32233

自用，poc作者为Piotr Krysiuk，在使用前请先阅读README.md

Gemini 2.5 Pro nf_tables Red Teaming Case Study (CVE-2023-32233) — LLM Safety Alignment & Responsible Disclosure

CVE-2023-32233

A technical case study and timeline dataset documenting Google Gemini 2.5 Pro's safety alignment policies, guardrails, and refusal behavior evolution regarding…

A Linux-related vulnerability

Support x86 and x64

this tool can generate a exp for cve-2017-8486, it is developed by python

Exploit vulnerabilities and vulnerability prevention implementation

Usbhijacking | CVE-2017-8464

- using python to detect cve-2017-8464 vulnerbilities

Sudo exploit

Containerized and deployable use of the CVE-2019-14287 vuln. View README.md for more.

Sudo Security Bypass (CVE-2019-14287)

This is a container built for demonstration purposes that has a version of the sudo command which is vulnerable to CVE-2019-14287

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php…

CVE-2023-6553 exploit script

Exploit Development for CVE-2023-6553 on Backup Plugin in Wordpress

This exploit is based on CVE-2023-6553 and was built upon the original exploit by Chocapik, it was added that a direct reverse shell can be obtained.

Scanner: CVE-2026-42208 LiteLLM SQL Injection — Python scanner for BerriAI LiteLLM proxy instances

CVE-2026-42208 lab

CVE-2026-40487

Threat intelligence brief on CVE-2026-42208, a critical pre-auth SQL injection in BerriAI LiteLLM exploited within 36 hours of disclosure. Covers attack path, …

Drupal Core PostgreSQL SQL Injection PoC - CVE-2026-9082. Ethical PoC for the Drupal vulnerability allowing anonymous SQL injection through the JSON:API module…

Drupal CVE-2026-9082 Blind SQL Injection Checker

CVE-2026-9082 | SA-CORE-2026-004

Scanner: CVE-2026-9082 Drupal PostgreSQL SQLi via JSON:API — Python scanner for unauthenticated SQLi leading to RCE (CISA KEV)

CVE-2026-9082

PoC for CVE-2026-9082 (Drupal SA-CORE-2026-004) Drupal Core SQLi

Mass Scanner For Drupal Exploit CVE-2026-9082

CVE-2026-1731 - Critical command injection vulnerability in BeyondTrust Remote Support and Privileged Remote Access due to unsafe Bash arithmetic evaluation in…

CVE-2026-1731 PoC

Passive vulnerability scanner for CVE-2026-1731 — BeyondTrust RS/PRA pre-auth RCE (CVSS 9.9). Educational & defensive use only.

CVE-2026-1731 — BeyondTrust Remote Code Execution Vulnerability

Scanner: CVE-2026-1731 BeyondTrust Remote Support Pre-auth RCE — Python checker for actively exploited vulnerability (CISA KEV)

Security Research and Proof-of-Concept (PoC) for CVE-2026-0300 : Unauthenticated Remote Code Execution (RCE) in Palo Alto Networks PAN-OS User-ID Portal.

A research-grade Proof-of-Concept (PoC) for CVE-2026-0300, targeting the Buffer Overflow vulnerability in Palo Alto Networks PAN-OS User-ID™ Authentication Por…

Scanner: CVE-2026-0300 PAN-OS User-ID Captive Portal Buffer Overflow RCE — Python CLI for detecting actively exploited BOF vulnerability in Palo Alto firewalls…

a honeypot for CVE-2026-0300

PAN-OS CVE-2026-0300 Non-Destructive Exposure Survey Tool

CVE-2026-0300

Read-only audit tooling for CVE-2026-0300 (PAN-OS User-ID Authentication Portal exposure)

CVE-2025-68645 - A Local File Inclusion (LFI) vulnerability in the Webmail Classic UI of Zimbra Collaboration

Academic proof-of-concept demonstrating CVE-2025-68645 for authorized security research.

CVE-2025-68645

Zimbra Path Traversal (CVE-2025-68645) - Unauthenticated file read vulnerability in Zimbra Collaboration Suite

POC BLH Magelang CSIRT 2026 by babyrootkid