Every new exploit,
on the radar.

CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH

a signal handler race condition in OpenSSH's server (sshd)

32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc

Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)

MIRROR of the original 32-bit PoC for CVE-2024-6387 "regreSSHion" by 7etsuo/cve-2024-6387-poc

PoC - Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (Scanner and Exploit)

This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports. The script c…

CVE-2024-6387 (regreSSHion) Exploit (PoC), a vulnerability in OpenSSH's server (sshd) on glibc-based Linux systems.

CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse …

cve-2026-61511

CVE-2026-61511 - Draft or Todo

vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template r…

SharePoint WebPart Injection Exploit Tool

Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server (CVE-2025-53770)

Scanner for the SharePoint CVE-2025-53770 RCE zero day vulnerability.

POC

ToolShell scanner - CVE-2025-53770 and detection information

CVE-2025-53770 Mass Scanner

A critical zero-auth RCE vulnerability in SharePoint (CVE-2025-53770), now exploited in the wild, building directly on the spoofing flaw CVE-2025-49706.

A sophisticated, wizard-driven Python exploit tool targeting CVE-2025-53770, a critical (CVSS 9.8) unauthenticated remote code execution (RCE) vulnerability in…

PoC Exploit for VM2 Sandbox Escape Vulnerability

Tool for exploring CVE-2023-30547

PoC to CVE-2023-30547 (Library vm2)

Walkthrough for Codify (Linux - Easy). Exploits vm2 RCE (CVE-2023-30547), SQLite DB hash extraction, Bcrypt cracking with John, and Privilege Escalation via B…

Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE

This repository contains a proof-of-concept exploit written in C++ that demonstrates the exploitation of a vulnerability affecting the Windows Error Reporting …

CVE-2023-36874 Proof of Concept

Educational Proof of Concept (PoC) for CVE-2023-36874 — Windows Error Reporting (WER) Local Privilege Escalation vulnerability.

HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907

A REAL DoS exploit for CVE-2022-21907

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers

CVE-2022-21907 Vulnerability PoC

CVE-2022-21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit. Detection and protection: P…

POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability.

PoC for CVE-2021-31166 and CVE-2022-21907

cve-2022-21907

CVE-2026-32746 - GNU InetUtils telnetd LINEMODE SLC Buffer Overflow PoC (pre-auth RCE, CVSS 9.8)

Kangaroo is a exploit built on CVE-2026-32746. i made this for security researchers, IT professionals, DevOps. so they can understand it better. DO NOT USE TH…

一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密…

CVE-2021-21972 Exploit

Proof of Concept Exploit for vCenter CVE-2021-21972

NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473

CVE-2021-21972

Nmap script to check vulnerability CVE-2021-21972

(CVE-2018-9995) Get DVR Credentials

DVR-Exploiter a Bash Script Program Exploit The DVR's Based on CVE-2018-9995

POC of CVE-2018-9995 written in Rust.

Simple python3 script to automate CVE-2018-9995

CVE-2018-9995_Batch_scanning_exp

Hack The CCTV | DVRs; Credentials Exposed | CVE-2018-9995

DVR系列摄像头批量检测

CVE-2024-24919 [Check Point Security Gateway Information Disclosure]

An Vulnerability detection and Exploitation tool for CVE-2024-24919

CVE-2024-24919 exploit

This repository contains a proof-of-concept (PoC) exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows …

CVE-2024-24919 Exploit PoC

POC - CVE-2024–24919 - Check Point Security Gateways

CVE-2020-11023 PoC for bug bounty.

Vulnearability Report of the New Jersey official site

Offline jQuery CVE-2020-11023 remediation kit for legacy Spring/JSP - Node.js built-ins only (no npm, no internet)

Demonstration of CVE-2020-11023

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection

[ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains. [ProxyShell] CVE-2021…

A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin (…

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

Detect webshells dropped on Microsoft Exchange servers exploited through "proxylogon" group of vulnerabilites (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, …

PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github

CVE-2021-22986 & F5 BIG-IP RCE

This is a Poc for BIGIP iControl unauth RCE

cve-2021-22986 f5 rce 漏洞批量检测 poc

Code By:Tas9er / F5 BIG-IP 远程命令执行漏洞

CVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC集合

F5 BIG-IP远程代码执行；cve-2021-22986，批量检测；命令执行利用

CVE-2021-22986 F5 BIG-IP iControl 命令执行漏洞

CVE-2021-22986 Checker Script in Python3

CVE-2020-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

HoneyPoC 2.0: Proof-of-Concept (PoC) script to exploit IPv6 (CVE-2020-16898).

PoC BSOD for CVE-2020-16898 (badneighbor)

CVE-2020-16898 Windows TCP/IP远程代码执行漏洞 EXP&POC

A network detection package for CVE-2020-16898 (Windows TCP/IP Remote Code Execution Vulnerability)

PoC BSOD for CVE-2020-16898

CVE-2020-16898 Windows TCP/IP远程代码执行漏洞 EXP&POC

HoneyPoC: Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2000 up to Window…

A denial-of-service proof-of-concept for CVE-2020-1350

NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473

Denial of Service PoC for CVE-2020-1350 (SIGRed)

This Powershell Script is checking if your server is vulnerable for the CVE-2020-1350 Remote Code Execution flaw in the Windows DNS Service

CVE-2020-1350 Proof-of-Concept

Detection of attempts to exploit Microsoft Windows DNS server via CVE-2020-1350 (AKA SIGRed)

Fake exploit tool, designed to rickroll users attempting to actually exploit.

A scanner for the FortiNet vulnerability CVE-2025-64446

PoC de CVE-2025-64446: path traversal a RCE en Fortinet FortiWeb. Solo uso educativo.

CVE-2025-64446 - A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, …

Security research tool for FortiWeb CVE-2025-64446 vulnerability. Automated exploitation framework with advanced logging, real-time metrics, proxy debugging, a…

Security research tool for detecting and testing CVE-2025-64446 (FortiWeb Path Traversal RCE vulnerability)

FortiWeb Unauthenticated RCE via Path Traversal & CGI Auth Bypass

POC for CVE-2022-1388

CVE-2022-1388 F5 BIG-IP RCE 批量检测

F5 BIG-IP RCE exploitation (CVE-2022-1388)

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE

Exploit and Check Script for CVE 2022-1388

PoC for CVE-2022-1388_F5_BIG-IP

K23605346: BIG-IP iControl REST vulnerability CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST RCE

CVE-2024-3400 Palo Alto OS Command Injection

CVE-2024-3400-RCE

CVE-2024-3400

CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect

Global Protec Palo Alto File Write Exploit

CVE-2023-22515: Confluence Broken Access Control Exploit

Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具

Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence

CVE-2023-22515

Confluence Unauthorized Administrator User Addition Exploitation Script

配合 CVE-2023-22515 后台上传jar包实现RCE

Confluence后台rce

Poc for CVE-2023-22515

Wing FTP Server Remote Code Execution (RCE) Exploit (CVE-2025-47812)

Simple exploit for Wing FTP Server RCE (CVE-2025-47812) to run commands and get a reverse shell. For educational use only.

Wing FTP Server RCE via Lua Injection

CVE-2025-47812 POC

Unauthenticated remote code execution vulnerability in Wing FTP Server <= 7.4.3.

exploit

CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation

Script-only privilege escalation chain using CVE-2025-6019 and UDisks2 (no filesystem image included).

Full BadUSB attack chain: keystroke-injection payload delivery, C2 client, privilege escalation (CVE-2025-6019), and systemd persistence on Linux.

Exploit script for CVE-2020-7961

Security research on Liferay CE 7.0.3 GA4: pre-auth RCE as root (CVE-2020-7961 class) reproduced end-to-end, plus 16 more findings — 8+ with no known CVE. Agen…

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS)

CVE-2020–7961 Mass exploit for Script Kiddies

LPE exploit for CVE-2024-0582 (io_uring)

is a PoC exploit targeting a specific vulnerability in the Linux kernel (CVE-2024-0582)

Data-only exploit for CVE-2024-0582

A data-only attack based on CVE-2024-0582

CVE-2024-0582 exploit

An exploit for a Use-After-Free vulnerability in the io_uring subsystem in the linux kernel

kernel exploit

A Proof of Concept (PoC) exploit for CVE-2015-1328

This is my SNP project where my ID is IT19366128

compiled CVE-2015-1328

CVE: 2015-1328 On python test

Custom vulnerable VM (Ubuntu 14.04) designed for teaching multi-stage penetration testing. Features 10 interconnected challenges across Forensics, Web Exploita…

Full black-box penetration test against SecOS:1 (VulnHub) — CSRF exploitation, privilege escalation via CVE-2015-1328 (OverlayFS), post-exploitation

PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container

RCE against WordPress 4.6; Python port of https://exploitbox.io/vuln/WordPress-Exploit-4-6-RCE-CODE-EXEC-CVE-2016-10033.html

Prevent PHP vulnerabilities similar to CVE-2016-10033 and CVE-2016-10045.

PHPMailer < 5.2.18 Remote Code Execution Exploit

Exploits CVE-2016-10033 and CVE-2016-10045

Code and vulnerable WordPress container for exploiting CVE-2016-10033

To solve CTFS.me problem