Every new exploit,
on the radar.

iOS 15.1 kernel exploit POC for CVE-2021-30955

CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM devices (A14-A15)

A test app to check if your device is vulnerable to CVE-2021-30955

https://gist.github.com/jakeajames/37f72c58c775bfbdda3aa9575149a8aa compiled into a ipa 15.0-15.2b1

Jake Jame's proof of concept wrapped into an iOS app for CVE-2021-30955

Clone from gist

desc_race exploit for iOS 15.0 - 15.1.1 (with stable kernel r/w primitives) (CVE-2021-30955)

Windows LPE exploit for CVE-2022-37969

Tutorial of CVE-2022-37969 with focus on the methodology of Kernel exploitation, not CVE's internal causes

CVE-2022-37969 poc

GiveWP PHP Object Injection exploit

PoC for CVE-2024-5932.

12

CVE-2023-25813 Vulnerability Reproduction - SQL Injection in Sequelize

Sequelize Sql Injection 취약점 구현

MS17-010_CVE-2017-0143

EternalBlue is a well-known SMB exploit created by the NSA to attack various versions of Windows, including Windows 7. Etern-Blue-Windows-7-Checker will basica…

Simple script using nmap to detect CVE-2017-0143 MS17-010 in your network

MS17-010 (CVE-2017-0143) - Python3 Script

Technical Analysis of the SMB vulnerability (CVE-2017-0143) & its impact on the vulnerable system

A hands-on vulnerability assessment and exploitation of a Windows 7 VM using the EternalBlue (CVE-2017-0143) exploit. Includes scanning, exploitation with Meta…

This is a security assessment report regarding the EthernalBlue vulnerability (CVE-2017-0143).

GitLab CVE-2023-2825 PoC. This PoC leverages a path traversal vulnerability to retrieve the /etc/passwd file from a system running GitLab 16.0.0.

PoC for CVE-2023-2825: automated GitLab 16.0.0 arbitrary file read via nested public groups, project upload traversal, reusable upload paths, and clean CLI out…

the proof of concept written in Python for an unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when …

On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition (CE) and Enterprise Edition…

CVE-2023-2825 exploit script

Exploiting CVE-2023-2825 on a VM

CISCO CVE-2020-3452 Scanner & Exploiter

CVE-2020-3452 Cisco ASA Scanner -unauth Path Traversal Check

Just basic scanner abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of the CISCO ASA applicances.

CVE-2020-3452 exploit

[CVE-2020-3452] Cisco Adaptive Security Appliance (ASA) & Cisco Firepower Threat Defense (FTD) Web Service Read-Only Directory Traversal

CVE-2020-3452 - Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) traversal

CVE-2020-3452

POC for netdata ndsudo vulnerability - CVE-2024-32019

CVE-2024-32019 is a high-severity local privilege escalation vulnerability in Netdata (versions >= 1.44.0-60 < 1.45.3), caused by insecure use of the PATH vari…

this is a poc for the CVE-2025-24893

Netdata ndsudo Privilege Escalation PoC

Netdata ndsudo local privilage escalation workflow and POC (CVE-2024-32019)

Netdata ndsudo PoC

A sophisticated, cross-platform exploit generator for **CVE-2026-34621** – a critical prototype pollution vulnerability in Adobe Acrobat and Reader that leads …

This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220

This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location "/main/inc/lib/javascript/bigupload/inc/bigUp…

Python exploit for Chamilo Unrestricted File Upload Vuln - CVE-2023-4220

Chamilo LMS Unauthenticated Remote Code Execution

Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthent…

RCE Chamilo 1.11.24

(CVE-2023-4220) Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

CVE-2018-25031 tests

.json and .yaml files used to exploit CVE-2018-25031

Exploit Swagger UI - User Interface (UI) Misrepresentation of Critical Information (CVE-2018-25031)

PoC of CVE-2018-25031

A simple POC (CVE-2018-25031

PoC for CVE-2024-48990

Testing POC for use cases

Automated local privilege escalation exploit for CVE-2024-48990 (needrestart v3.7), leveraging PYTHONPATH hijacking to gain root access.

Exploit for CVE-2024-48990 (Local Privilege Escalation in needrestart < 3.8)

My exploit for CVE-2024-48990. Full details of how I made this are on my blog.

Exploit for CVE-2024-48990 - Privilege Escalation in Needrestart 3.7-3. For eductional purposes only

My take on the needrestart Python CVE-2024-48990

an exploit for CVE-2024-48990 ( Local Privilege Escalation ) in needrestart

https://medium.com/@mansoorr/exploiting-cve-2020-25213-wp-file-manager-wordpress-plugin-6-9-3f79241f0cd8

Python exploit for RCE in Wordpress

Python Interactive Exploit for WP File Manager Vulnerability. The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upl…

CVE-2020-25213 Wordpress File Manager 6.7 Plugin 0day exploit

Will write a python script for exploiting this vulnerability

CVE-2024-4040 CrushFTP SSTI LFI & Auth Bypass | Full Server Takeover | Wordlist Support

Scanner for CVE-2024-4040

is a PoC for CVE-2024-4040 tool for exploiting the SSTI vulnerability in CrushFTP

A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to…

Exploit CrushFTP CVE-2024-4040

CVE-2024-4040 PoC

quick fix for CVE-2019-10149, works on Debian\Ubuntu\Centos

CVE-2019-10149 : A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/del…

simple python socket connection to test if exim is vulnerable to CVE-2019-10149. The payload simply touch a file in /tmp/eximrce.

PoC for CVE-2019-10149, this vulnerability could be xploited betwen 4-87 to 4.91 version of Exim server.

CVE-2019-10149 privilege escalation

Instructions for installing a vulnerable version of Exim and its expluatation

CVE-2019-10149

Exim Honey Pot for CVE-2019-10149 exploit attempts.

A proof of concept exploit for SQLPad RCE (CVE-2022-0944).

SQLPad - Template injection (POC exploit for SQLPad RCE [CVE-2022-0944])

PoC for RCE in SQLPad (CVE-2022-0944)

CVE-2022-0944 Remote Code Execution Exploit

PoC code written for CVE-2022-0944 to make exploitation easier. Based on information found here: https://huntr.com/bounties/46630727-d923-4444-a421-537ecd63e7…

A easy sudo poc by cryingn.

🔓 Local privilege escalation PoC for CVE-2025-32462 (sudo -h bypass) – gain root via misconfigured sudoers

Docker PoC for CVE-2025-32462 & CVE-2025-32463 (sudo), based on Stratascale CRU research.

cve-2025-32462' demo

CVE-2025-32462 Exploit

The vulnerability was found by Rich Mirch. More details on it here: https://cxsecurity.com/issue/WLB-2025070022

CVE-2025-32462 exploit code

POCs to demonstrate CVE-2026-42167 in ProFTPD

Independent reproduction, code-level root-cause analysis, and realistic-exposure write-up for CVE-2026-42167 (ProFTPD mod_sql is_escaped_text() bypass).

ProFTPD SQL injection PoC

Pre-Auth RCE in ProFTPD via mod_sql is_escaped_text() bypass (CVE-2026-42167)

Python exploit for CVE-2026-42167 (ProFTPD mod_sql). Features automated file scanning and timing-based blind data exfiltration.

Proof of Concept for CVE-2025-24367

CVE-2025-24367: Cacti AuthN Graph Template RCE in posix sh

CVE-2025-24367 - Cacti Authenticated Graph Template RCE

Authenticated RCE PoC for Cacti (CVE‑2025‑24367). Uses graph template injection to write and execute a payload via the “Unix – Logged in Users” template. Inten…

Script hecho para obtener una webshell gracias a la vulnerabilidad de cacti CVE-2025-24367 en su versión 1.2.28.

A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute arbitrary code …

File upload logic flaw in Apache Struts2 exploit

s2-067(CVE-2024-53677)

A Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2.

Vulnerable Environment and Exploit for CVE-2024-53677

D-Link NAS CVE-2024-3273 Exploit Tool

Exploit for CVE-2024-3273, supports single and multiple hosts

D-Link NAS Command Execution Exploit

Quick and dirty honeypot for CVE-2024-3273

Turvanõrkuse CVE 2024 3273 analüüs: D-Link seadmete käsusüst

CVE-2024-3273 - D-Link Remote Code Execution (RCE)

CVE-2024-3273 — Authorized Penetration Test Report D-Link DNS-320L NAS | Client: Otonata

Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640

Check for CVE-2023-32629 "GameOver(lay)" vulnerability

One-Liner CVE-2023-32629/CVE-2023-2640 Ubuntu Privilege Escalation

CVE-2023-32629 & CVE-2023-2640 Ubuntu Privilege Escalation POC

OverlayFS Local Privilege Escalation - Full write-up to full escalation

An unauthenticated data extraction vulnerability in Kyocera printers, which allows for recovery of cleartext address book and domain joined passwords

Kyocera cred dumper based on CVE-2022-1026

NSE port of CVE-2022-1026 exploit for mass identification and exploitation

An unauthenticated data extraction vulnerability in Kyocera printers, which allows for recovery of cleartext address book and domain joined passwords.

Improved Golang Version of Rapid7 PoC for CVE-2022-1026

Tool that reproduces CVE-2025-55315 in ASP.NET Core.

CVE-2025-55315 PoC Exploit

Playground to experiment with different behavior on patched/unpatched Kestrel for the CVE-2025-55315 HTTP smuggling vulnerability

专业级HTTP请求走私漏洞利用与自动化渗透测试工具

Quick and Simple Scripts to Scan for Vulnerable Servers and Packet Level Monitors

Proof-of-concept exploit for CVE-2025-55315 (.NET HTTP Request Smuggling). Demonstrates how improperly parsed chunked encoding lets attackers smuggle requests …