Every new exploit,
on the radar.

Exploit for command injection vulnerability found in uhttpd binary from TP-Link Tapo c200 IP camera

🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras (<= v1.1.16 Build 211209)" 🔓

TP-Link Tapo c200 ver <1.1.15 - Remote Code Execution (RCE)

Sets up a local Tapo C200 using CVE-2021-4045

CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all firmware …

LPE exploit for CVE-2023-21768

Using CVE-2023-21768 to manual map kernel mode driver

Windows_AFD_LPE_CVE-2023-21768

cve-2023-21768

CVE-2023-21768 Windows 11 22H2 系统本地提权 POC

C# / .NET version of CVE-2023-21768

MOVEit CVE-2023-34362

CVE-2023-34362: MOVEit Transfer Unauthenticated RCE

POC for CVE-2023-34362 affecting MOVEit Transfer

Repository with everything I have tracking the impact of MOVEit CVE-2023-34362

CVE-2023-34362-IOCs. More information on Deep Instinct's blog site.

an exploit of POC for CVE-2023-34362 affecting MOVEit Transfer

This shellscript given the OrgKey 0 will parse the header of the base64 artifacts found in MOVEit Logs and decrypt the Serialized object used a payload

CVE-2020-17103 adapted for C2 with split-binary SYSTEM callback

CVE-2020-17103 was apparently not patched or the patch was reversed, regardless this the PoC for an LPE in cldflt.sys

CVE-2020-17103

Sigma detection rule for MiniPlasma (CVE-2020-17103)

MiniPlasma CVE-2020-17103 mitigation advisory

CVE-2020-17103

WooCommerce Payments: Unauthorized Admin Access Exploit

CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]

CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]

Exploração prática de vulnerabilidade crítica no WordPress usando o plugin WooCommerce Payments.

Wordpress CVE-2023-28121

Python research notes and tooling for CVE-2023-28121

WooCommerce Payments (WordPress plugin) =< 5.6.1 CVE-2023-28121 PoC

CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13

RunAsAnyone: PoC and writeup for bypassing the initial patch of CVE-2024-0044, Android run-as any app vulnerability allowing privilege escalation from adb to i…

Exfiltrate sensitive user data from apps on Android 12 and 13 using CVE-2024-0044 vulnerability remotely

EvilDroid automates the exploitation of CVE-2024-0044, installing malicious payloads on a target device and extracting sensitive data. It features automated AD…

利用 CVE-2024-0044 Android 权限提升下载任意目标App沙箱文件。

CVE-2024-0044

a vulnerability affecting Android version 12 & 13

CVE-2024-0044: uma vulnerabilidade de alta gravidade do tipo "executar como qualquer aplicativo" que afeta as versões 12 e 13 do Android

CVE-2025-25063 MadeYouReset HTTP/2 DDoS

A Python script that checks if a web server is vulnerable to MadeYouReset (CVE-2025-8671) — an HTTP/2 DoS attack that bypasses Rapid Reset mitigations by trick…

PoC para validar vulnerabilidade MadeYouReset

PoC éducatif pour la vulnérabilité CVE-2025-8671 (DoS HTTP/2 sur lighttpd). À utiliser uniquement en laboratoire local.

CVE-2025-8671 vulnerability POC

CVE-2025-4138 / CVE-2025-4517 — Python tarfile PATH_MAX Symlink Filter Bypass

CVE-2025-4138 - Python Arbitrary file write outside extraction directory

A Python script to generate a malicious tar archive that exploits CVE-2025-4138 / CVE-2025-4517.

Tarfile module directory traversal vulnerability ( with overflow crossed Directory ) --> Lead to Privilege escalation

Python PoC for CVE-2025-4138, a path traversal in Python's tarfile module abusing symlink chains to bypass PATH_MAX for arbitrary file write

Bootstrapped Rails 3.2.10 to test the remote code exploit CVE-2013-0156

Inspect all of your heroku apps to see if they are running a vulnerable version of Rails

Silly Rails App to demonstrate vuln CVE-2013-0156

crack repo from jnunemaker but with version 0.1.8 and rails CVE-2013-0156 vulnerability fixed

Arbitrary deserialization that can be used to trigger SQL injection and even Code execution

Pseudo shell for CVE-2013-0156.

This script is specifically designed to solve the challenge on PentesterLab for the CVE-2013-0156 exploit

Modified ruby script for RCE

exploit CVE-2024-38475(mod_rewrite weakness with filesystem path matching)

CVE-2024-38475 Scanner using FFUF + Seclists

CVE-2024-38475 exploitation & scanning tool with Mullvad VPN rotation

Drupal8's REST RCE, SA-CORE-2019-003, CVE-2019-6340

Environment for CVE-2019-6340 (Drupal)

CVE-2019-6340-Drupal SA-CORE-2019-003

CVE-2019-6340 POC Drupal rce

(CVE-2019-6340, CVE-2018-7600) drupal8-REST-RCE

CVE-2019-6340 Drupal 8.6.9 REST Auth Bypass examples

cve-2019-6340

Bits generated while analyzing CVE-2019-6340 Drupal RESTful RCE

Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation

CVE-2025-6934 is a critical vulnerability in the WordPress Opal Estate Pro plugin (<= 1.7.5) that allows unauthenticated attackers to create new administrator …

Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation

CVE-2025-6934 POC

CVE-2025-6934 - Exploit WordPress Opal Estate Pro

WP-CVE-2025-6934 | Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation

Exploit for the unauthenticated file upload vulnerability in WordPress's Royal Elementor Addons and Templates plugin (< 1.3.79). CVE-ID: CVE-2023-5360.

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to u…

CVE-2023-5360 Auto Shell Upload WordPress Royal Elementor 1.3.78 Shell Upload

Royal Elementor Addons - Unauthenticated Remote Code Execution

CVE-2023-5360 PoC: Unauthenticated arbitrary file upload leading to RCE in Royal Elementor Addons (≤ 1.3.78), written in pure Python.

CVE-2023-5360

Wordpress CVE-2023-5360

CVE-2023-32243 - Essential Addons for Elementor 5.4.0-5.7.1 - Unauthenticated Privilege Escalation

Wordpress CVE-2023-32243

Exploit for CVE-2023-32243 - Unauthorized Account Takeover.

Identifies domains which run WordPress and tests against vulnerabilities (CVE-2023-32243) / #VU76395 / etc...

poc

Vulnerable docker to test for: CVE-2023-32243

CVE-2023-34960 Chamilo PoC

Perform with Massive Command Injection (Chamilo)

Wordpress CVE-2023-34960

Chamilo CVE-2023-34960 Batch scan/exploit

chamilo soap api rce (/webservices/additional_webservices.php)

:poodle: Poodle (Padding Oracle On Downgraded Legacy Encryption) attack CVE-2014-3566 :poodle:

CloudPassage Halo policy for detecting vulnerability to CVE-2014-3566 (AKA POODLE)

Test code for poodle attack (CVE-2014-3566)

Vibe coded POC of exploitation of the POODLE CVE-2014-3566

Auditoría de seguridad y análisis de vulnerabilidades (CVE-2014-3566 y CVE-2010-2333) en la infraestructura de red local y router residencial.

Reverse Shell POC exploit for Dolibarr <= 17.0.0 (CVE-2023-30253), PHP Code Injection

In Dolibarr 17.0.0 with the CMS Website plugin (core) enabled, an authenticated attacker can obtain remote command execution via php code injection bypassing t…

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injected data.

I couldn’t find a PoC for CVE-2023-30253, so I developed an effective one

An authenticated RCE exploit for Dolibarr ERP/CRM CVE-2023-30253.

Poc for CVE-2023-30253

Dolibarr 17.0.0 PHP Code Injection Exploit

POC exploit for Dolibarr <= 17.0.0 (CVE-2023-30253)

A vulnerability has been identified in Docker Desktop. A remote attacker could exploit this vulnerability to trigger security restriction bypass on the targete…

一个功能强大的 Docker 远程 API 漏洞利用工具，用于 CVE-2025-9074 漏洞的安全研究和测试。

New vulnerability found in Docker. Credit for finding the vulnerability goes to Felix Boulet

Proof-of-Concept exploit for CVE-2025-9074 - Unauthenticated Docker API exposure allowing arbitrary container creation and host filesystem access.

Docker API CVE-2025-9074 PoC (Proof-Of-Concept). A sophisticated exploitation framework for CVE-2025-9074, targeting unauthenticated Docker API endpoints with …

Proof of concept exploit for CVE-2025-9074 - Unauthenticated Docker Engine API container escape affecting Docker Desktop < 4.44.3 on Windows and macOS (CVSS 9…

检测域内常见一把梭漏洞，包括：NoPac、ZeroLogon、CVE-2022-26923、PrintNightMare

The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Direct…

A powershell poc to load and automatically run Certify and Rubeus from memory.

Walkthrough on the exploitation of CVE-2022-26923, a vulnerability in AD Certificate Services

A proof of concept exploiting CVE-2022-26923.

Exploitation de CVE-2022-26923

Exploitation for CVE-2022-26923

Fortinet FortiClientEMS improper access control

CVE-2026-35616

CVE-2026-35616 - FortiClient EMS Pre-Authentication API Bypass (CVSS 9.1, CISA KEV). Python & Nmap NSE detection scripts with full technical breakdown. One for…

Detector de CVE-2026-35616: identifica servidores FortiClient EMS vulnerables (7.4.5-7.4.6).

PoC de CVE-2026-35616: control de acceso indebido en FortiClient EMS.

CVE-2026-35616 - Draft

Exploit for CVE-2023-35813 POC

An exploit for the Sitecore Remote Code Execution Vulnerability

CVE-2023-35813 is a proof-of-concept used to determine if an instance of Sitecore is vulnerable by analyzing a server Response Header for modification.

Exploit CVE-2023-35813 PoC Script

test_private_CVE

CVE-2024-23113 是一个在 Linux Kernel 中被发现的漏洞，它属于 任意代码执行漏洞，影响了 bpf (Berkeley Packet Filter) 子系统。具体来说，这个漏洞影响了 bpf 程序的 bpf_prog 类型的对象，并且可以允许攻击者通过构造恶意的 BPF 程序来在内核空间执行恶…

This python scripts searches a client list to see if their FortiGate device is vulnerable to this CVE.

A proof of concept for CVE 2024 23113 inspired by WatchTowr's article.

A Python replicated exploit for Webmin 1.580 /file/show.cgi Remote Code Execution

This was converted from a metasploit module as an exercise for OSCP studying

An exploit for CVE-2012-2982 implemented in Rust

Python exploit for CVE-2012-2982

PoC Python script as an exercice from tryhackme.

Python PoC for Webmin 1.580 Remote Command Execution (CVE-2012-2982)

Exploit for CVE-2012-2982

Exploit for Arbitrary File Read for CVE-2023-26360 - Adobe Coldfusion

Adobe ColdFusion CVE-2023-26360/CVE-2023-29298 自动化实现反弹

Exploit for Remote Code Execution in ColdFusion 2021 (CVE-2023-26360)

This exploit is based on CVE-2023-26360 (https://nvd.nist.gov/vuln/detail/CVE-2023-26360) and was built on top of the Metasploit module and the jakabakos/CVE-2…

Exploit - CVE-2023-26360

A simple PoC for WordPress RCE (author priviledge), refer to CVE-2019-8942 and CVE-2019-8943.

WordPress crop-image exploitation

Python exploit toolkit for WordPress Crop Image RCE — CVE-2019-8942 & CVE-2019-8943

cve-2019-8942, cve-2019-8943