Every new exploit,
on the radar.

Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.

Dahua IP camera CVE research toolkit (CVE-2021-33044/33045, CVE-2025-31700/31701)

Dahua IPC/VTH/VTO devices auth bypass exploit

Camera Dahua Research lỗ hổng CVE-2021-33044

DAHUA_AUTH-BYPASS-CVE-2021-33044

OpenSSH Username Enumeration - CVE-2016-6210

Custom exploit written for enumerating usernames as per CVE-2016-6210

User name enumeration against SSH daemons affected by CVE-2016-6210.

PoC of cve-2016-6210

This project explores whether modern OpenSSH reveals valid usernames through subtle response or timing differences. CVE-2016-6210 user enumeration investigatio…

CVE-2020-5902 BIG-IP

Proof of concept for CVE-2020-5902

F5 BIG-IP RCE CVE-2020-5902 automatic check tool

Automated script for F5 BIG-IP scanner (CVE-2020-5902) using hosts retrieved from Shodan API.

exploit code for F5-Big-IP (CVE-2020-5902)

Python script to exploit F5 Big-IP CVE-2020-5902

F5 BIG-IP 任意文件读取+远程命令执行RCE

Proof of Concept for the NTLM Hash Leak via .library-ms CVE-2025-24054 / CVE-2025-24071

PoC - CVE-2025-24071 / CVE-2025-24054, NTMLv2 hash'leri alınabilen bir vulnerability

Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure

Vulnerabilidad NTLM (CVE-2025-24054) explotada para robo de hashes

A proof of concept for CVE-2025-24054/CVE-2025-24071

Módulo de Metasploit para explotar CVE-2025-24054 (ex 24071). Exploit de filtración NTLM integrado en Metasploit para vectores de ataque basados en bibliotecas…

Exploit for CVE-2023-41892

CVE-2023-41892 Reverse Shell

CVE-2023-41892 - Craft CMS Remote Code Execution (RCE)

A Craft CMS vulnerability that allows Remote Code Execution (RCE).

Customized this for my own use

PoC for UniFi Network Application Pre-Auth Path Traversal (CVE-2026-22557)

CVE-2026-22557

Safely detect whether a UniFi Network Application controller is vulnerable to CVE-2026-22557

Detection content for CVE-2026-22557 — UniFi Network Application unauthenticated path traversal (CVSS 10.0). Includes YARA, Sigma, KQL, Splunk SPL, Sysmon conf…

CVE-2026-22557 Path Traversal Ubiquti UniFi Network Application

CVE-2025-0133 GlobalProtect XSS

Reflected XSS vulnerability found in Palo Alto GlobalProtect Gateway & Portal. Attackers can inject malicious scripts via crafted requests.

CVE-2025-0133 Scanner | Palo Alto GlobalProtect XSS Checker

Palo Alto - Global Protect - Reflected XSS

CVE-2025-0133 Exploit

Scope-aware bug bounty pipeline for CVE-2025-0133 (Palo Alto PAN-OS GlobalProtect reflected XSS). Shodan → H1/BC scope match → safe canary validation → report …

Double-free in Apache httpd mod_http2 stream cleanup leading to pre-auth RCE.

Proof-of-Concept exploit for CVE-2026-23918 (Apache mod_http2 double-free). Features multi-mode DoS (Rapid-RST, Slow-Drip) and passive RCE/vulnerability detect…

Apache HTTP/2 double-free vulnerability PoC (CVE-2026-23918)

Elite reconnaissance script for auditing Apache's HTTP/2 stack against memory corruption (CVE-2026-23918). Features ALPN protocol forcing and monochrome dashbo…

This repository contains a Proof of Concept (PoC) demonstrating the Double Free vulnerability (CVE-2026-23918) in Apache HTTP Server 2.4.66 `mod_http2`.

This is a proactive tool for security auditing. For your GitHub repository, you’ll want a description that highlights its safety (non-intrusive) and its specif…

CVE-2026-23918 Apache mod_http2 Double-Free Detector

Upgrade to Apache 2.4.67 to fix CVE-2026-23918 vulneribility

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

Scanner for CVE-2020-0796 - SMBv3 RCE

CVE-2020-0796 Remote Code Execution POC

SMBGhost (CVE-2020-0796) Automate Exploitation and Detection

PoC for triggering buffer overflow via CVE-2020-0796

CVE-2020-0796 Local Privilege Escalation POC

Cobalt Strike AggressorScripts CVE-2020-0796

A reliable exploit + write-up to elevate privileges to root. (Tested on Ubuntu 22.04)

All Credit to MaherAzzouzi (https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit). This is a copy of the exploit for CTFs

Privilege escaltion exploit script for Boardlight machine on HackTheBox. I had access as the Larissa user and ran this script from the /tmp directory; script h…

Exploit created by nu11secur1ty (https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2022-37706)

CVE-2022-37706-Enlightenment v0.25.3 - Privilege escalation

PoC

ROOT TOOL

GravCMS Unauthenticated Arbitrary YAML Write/Update leads to Code Execution (CVE-2021-21425)

working exploit for the old cve-2021-21425 grav cms 1.7.10 vuln

It is a nmap script for GravCMS vulnerability (CVE-2021-21425)

A proof of concept for Joomla's CVE-2015-8562 vulnerability (Object Injection RCE)

All versions of the Joomla! below 3.4.6 are known to be vulnerable. But exploitation is possible with PHP versions below 5.5.29, 5.6.13 and below 5.5.

Joomla 1.5 - 3.4.5 Object Injection RCE X-Forwarded-For header

A proof of concept for Joomla's CVE-2015-8562 vulnerability

CVE-2015-8562 Exploit in bash

Adapted CVE-2015-8562 payload

POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file.

Path Traversal On The "/Modules/Messaging/" Endpoint In Splunk Enterprise On Windows

Critical Splunk Vulnerability CVE-2024-36991: Patch Now to Prevent Arbitrary File Reads

Proof of Concept for CVE-2024-36991. Path traversal for Splunk versions below 9.2.2, 9.1.5, and 9.0.10 for Windows which allows arbitrary file read.

Path traversal vulnerability in Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10 that allows reading sensitive files.

Exploit for CVE-2024-36991 , written by me, enumerates a handfull of things, not all, cause not needed.

CVE-2024-36991: Path traversal that affects Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10.

This binary POC automates the exploitation of CVE-2024-36991 by sending crafted curl requests to a vulnerable Splunk instance. It retrieves sensitive files and…

Icecast Header Overwrite buffer overflow RCE < 2.0.1 (Win32)

My notes for CVE-2004-1561 IceCast exploitation

Python version of Metasploit exploit for CVE-2004-1561

Full compromise of TryHackMe's Ice machine — Icecast 2.0.1 RCE (CVE-2004-1561) via buffer overflow, followed by Windows privilege escalation through UAC bypass…

tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp

RCE through a race condition in Apache Tomcat

Apache Tomcat（CVE-2024-50379）条件竞争致远程代码执行漏洞批量检测脚本

This repository contains a Python script designed to exploit CVE-2024-50379, a vulnerability that allows attackers to upload a JSP shell to a vulnerable server…

Repositorio para alojar un template de Nuclei para probar el CVE-2024-50379 (en fase de prueba)

ExploitDB CVE-2024-50379 a vulnerability that enables attackers to upload a JSP shell to a vulnerable server and execute commands remotely. The exploit is espe…

Privilege escalation with polkit - CVE-2021-3560

PolicyKit CVE-2021-3560 Exploit (Authentication Agent)

CVE-2021-3560 Local PrivEsc Exploit

a reliable C based exploit and writeup for CVE-2021-3560.

PolicyKit CVE-2021-3560 Exploitation (Authentication Agent)

Exploit for CVE-2021-3560 (Polkit) - Local Privilege Escalation

Authenticated privilege escalation in Camaleon CMS v2.9.0 via improper parameter handling in the updated_ajax endpoint.

Python script to exploit Privilege Escalation in Camaleon CMS.

CVE-2025-2304 POC

Proof-of-concept for CVE-2025-2304 — critical (CVSS 9.4) mass-assignment privilege escalation in Camaleon CMS.

This Python script exploits a critical mass assignment vulnerability in Camaleon CMS version 2.9.0, allowing any registered user to escalate their privileges t…

Privilege escalation vulnerability in Camaleon CMS < 2.9.1.

CVE-2025-2304 POC - Camaleon CMS Privilege Escalation

CVE-2025-54123 Hoverfly Authenticated Middleware Command Injection RCE

CVE-2025-54123 Hoverfly Command Injection to RCE PoC

CVE-2025-54123 exploit and documentation

PoC CVE-2025-54123 - Hoverfly <= 1.11.3 - Authenticated Middleware Command Injection

Hoverfly CVE RCE

CVE-2024-42009 Proof of Concept

This script exploits a stored XSS vulnerability (CVE-2024-42009) in Roundcube Webmail version 1.6.7. It injects a malicious payload into the webmail system, wh…

This Proof of Concept (PoC) demonstrates an exploit for CVE-2024-42009, leveraging a cross-site scripting (XSS) vulnerability to extract emails from a target w…

CVE-2024-38819 nuclei template

fixed msf module for cve-2017-7269

iis6 exploit 2017 CVE-2017-7269

CVE-2017-7269 回显PoC ,用于远程漏洞检测..

CVE-2017-7269 to webshell or shellcode loader

An exploit for Microsoft IIS 6.0 CVE-2017-7269

Ruby Exploit for IIS 6.0 Buffer Overflow (CVE-2017-7269)

Kernel exploit for Xbox SystemOS using CVE-2024-30088

该漏洞存在于 NtQueryInformationToken 函数中，特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时，该漏洞源于内核在操作对象时对锁定机制的不当管理，这一失误可能导致恶意实体意外提升权限。

🆘New Windows Kernel Priviledge Escalation Vulnerability

Questa repository contiene una replica (tentativo di replica) scritto in Python per CVE-2024-30088.

Kernel exploit for Xbox SystemOS using CVE-2024-30088

This is a modified version of the original CVE-2024-30088 exploit, adapted to work in non-interactive environments (WinRM).

compiled poc binary local privilege escalation by oilrig

Detection and sanitization for Acropalypse Now - CVE-2023-21036

Discord bot for mitigating the aCropalypse vulnerability (CVE-2023-21036, CVE-2023-28303) by retroactively deleting vulnerable images

Web tool for detecting Acropalypse (CVE-2023-21036) https://lordofpipes.github.io/acropadetect/

CVE-2023-21036 detection in Go

A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python.

X-Ways Acropalypse extension detects CVE-2023-21036 in common images

Proof-of-concept script to leverage the PAN-OS GlobalProtect authentication bypass CVE-2026-0257

CVE-2026-0257

Palo Alto Networks PAN-OS contains an authentication bypass caused by flaws in the GlobalProtect portal and gateway, letting attackers establish unauthorized V…

GrayXploit Security research and defensive team validate this toolkit for CVE-2026-0257 (PAN-OS GlobalProtect Authentication Bypass). Includes vulnerability as…

CVE-2026-0257 - PAN-OS

testing

POC - CVE-2024–10914- Command Injection Vulnerability in `name` parameter for D-Link NAS

Exploit for cve-2024-10914: D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L Version 1.00, Version 1.01.0914.2012, Version 1.01, Version 1.02, Version 1.08 Command…

CVE-2024-10914 is a critical command injection vulnerability affecting several legacy D-Link Network Attached Storage (NAS) devices.

CVE-2024-10914 D-Link Remote Code Execution (RCE)

这是一个D-Link rce漏洞 检测程序

CVE-2024-10914 is a critical command injection vulnerability affecting several legacy D-Link Network Attached Storage (NAS) devices.

CVE-2024-10914_Manual testing with burpsuite