Every new exploit,
on the radar.

WordPress WP_Query SQL Injection POC

Wordpress 5.8.2 CVE-2022-21661 Vuln enviroment POC exploit

CVE-2022-21661 exp for Elementor custom skin.

Study and exploit the vulnerability CVE-2022-21661 that allows SQL Injections through plugins POST requests to WordPress versions below 5.8.3.

A Python PoC of CVE-2022-21661, inspired from z92g's Go PoC

Demonstration of the SQL injection vulnerability in wordpress 5.8.2

The first poc video presenting the sql injection test from ( WordPress Core 5.8.2-'WP_Query' / CVE-2022-21661)

CVE-2014-6287

a python3 version of the exploit written for CVE-2014-6287. Useful for completing the "Steel Mountain" room on TryHackMe.com without the use of metasploit.

HttpFileServer httpd 2.3

A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287

Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c

Rejetto http File Server 2.3.x (Reverse shell)

Jira未授权SSRF漏洞

https://jira.atlassian.com/browse/JRASERVER-69793

POC to check for Jira instances vulnerable to CVE-2019-8451

exploit for atlassian jira server SSRF

CVE-2024-34064 demo - v3 subtle vuln no misleading comment

CVE-2024-34064 demo - v4 subtle vuln good comment

CVE-2024-34064 demo - baseline (no sanitisation)

CVE-2024-34064 demo - v1 genuine fix honest comments

CVE-2024-34064 demo - v2 genuine fix bad comments

CVE-2024-34064 demo - v5 regex missing end anchor

CVE-2024-34064 demo - v6 sanitisation applied to wrong variable

Local privilege escalation PoC exploit for CVE-2019-16098

This exploit rebuilds and exploit the CVE-2019-16098 which is in driver Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any a…

# VortexCry-Ransomware VortexCry is an advanced ransomware that utilizes multi-stage process injection (such as Process Hollowing and APC Injection) and kernel…

A tiny cpp program to test reading memory using a vulnerable RTCore64.sys driver/device (CVE-2019-16098). It tries to read a "secret" from its own memory usin…

FortiWeb CVE-2025-25257 exploit

Public PoC for CVE-2025-25257: FortiWeb pre-auth SQLi to RCE

Exploiting the CVE-2025-25257 vulnerability in FortiWeb. This repository demonstrates secure pre-authenticated SQL injection.

PoC for CVE-2025-25257, a critical unauthenticated SQL injection in FortiWeb. Exploits SQLi via the Authorization header to write a webshell and gain RCE. No l…

CVE‑2025‑25257 is a critical pre-authentication SQL injection vulnerability affecting Fortinet FortiWeb’s

A working (at least for me :] ) exploit for CVE-2025-25257

A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files"…

Exploit forCVE-2020-29607

Authenticated remote code execution in Pluck CMS before 4.7.13.

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA vi…

Citrix CVE-2023-4966 from assetnote modified for parallel and file handling

An Exploitation script developed to exploit the CVE-2023-4966 bleed citrix information disclosure vulnerability

Proof Of Concept for te NetScaler Vuln

Parse citrix netscaler logs to check for signs of CVE-2023-4966 exploitation

Simulates CVE-2023-4966 Citrix Bleed overread bug

CVE-2023-4966 - NetScaler ADC and NetScaler Gateway Memory Leak Exploit

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

NoPacScan is a CVE-2021-42287/CVE-2021-42278 Scanner,it scan for more domain controllers than other script

.Net Assembly loader for the [CVE-2021-42287 - CVE-2021-42278] Scanner & Exploit noPac

CVE-2021-42287/CVE-2021-42278 exploits in powershell

CVE-2021-42287/CVE-2021-42278 Exploiter

CVE-2021-42287/CVE-2021-42278/OTHER Scanner & Exploiter.

CVE-2021-42287/CVE-2021-42278/OTHER Scanner & Exploiter.

Poc of CVE-2022-22980

CVE-2022-22980环境

CVE-2022-22980环境

CVE-2022-22980 exp && 靶场

spring data mongodb remote code execution | cve-2022-22980 poc

[CVE-2022-22980] Spring Data MongoDB SpEL Expression Injection

Exploitation de CVE-2022-22980

CVE-2026-24858 FortiCloud Single Sign On (SSO) a factory default enabled feature once you register any FortiGate/FortiManager/FortiAnalyzer contains a critic…

CVE-2026-24858 - Administrative FortiCloud SSO authentication bypass

아직 제로데이인거 같아, 공개되거나 천천히 분석할 예정....

A Proof-of-Concept demonstrating the application of 3D Navier-Stokes CTT formulations to packet flow optimization and defensive bypass.

While Fortinet's January 27, 2026 mitigation for **CVE-2026-24858** focuses on blocking specific accounts like `[email protected]`, it fails to address the **T…

Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across la…

WordPress Simple File List Unauthenticated RCE Exploit

Simple File List – Unauthenticated RCE Exploit (CVE-2025-34085)

Exploit for CVE-2025-34085

A Proof of Concept for CVE-2023-50564 vulnerability in Pluck CMS version 4.7.18

CVE-2023-50564 - An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary c…

This script exploits the file upload feature in Pluck CMS v4.7.18 to upload a malicious PHP file, enabling remote access via a reverse shell. Once uploaded, th…

Refurbish exploit in bash

Pluck-CMS v4.7.18 RCE exploit

CVE-2023-50564 PoC

Python Script to exploit CVE-2023-50564

Pluck v4.7.18 - Remote Code Execution (RCE)

CVE-2017-8917 - SQL injection Vulnerability Exploit in Joomla 3.7.0

Joomla 3.7 SQL injection (CVE-2017-8917)

CVE-2017-8917 SQL injection Vulnerability in Joomla! 3.7.0 exploit

Proof of Concept exploit for the Joomla 3.7.0 com_fields SQL injection vulnerability (CVE-2017-8917), demonstrating detection, enumeration, and data extraction…

cve-2017-8917

Python exploit for CVE-2017-8917 - Joomla 3.7.0 'com_fields' SQL Injection

CVE-2017-8917 - Joomla 3.7.0 'com_fields' SQL Injection

Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

WordPress Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

PoC Exploit for CVE-2024-5084

CVE-2023-22527 内存马注入工具

confluence CVE-2023-22527 漏洞利用工具，支持冰蝎/哥斯拉内存马注入，支持设置 http 代理

CVE-2023-22527 - RCE (Remote Code Execution) Vulnerability In Confluence Data Center and Confluence Server PoC

A critical severity Remote Code Execution (RCE) vulnerability (CVE-2023-22527) was discovered in Confluence Server and Data Center.

[Confluence] CVE-2023-22527 realworld poc

This repository presents a proof-of-concept of CVE-2023-22527

An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22527 leads to RCE

Atlassian Confluence - Remote Code Execution

Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)

Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)

SSL VPN Rce

Pulse Secure SSL VPN pre-auth file reading

This utility can help determine if indicators of compromise (IOCs) exist in the log files of a Pulse Secure VPN Appliance for CVE-2019-11510.

Nmap NSE script to detect Pulse Secure SSL VPN file disclosure CVE-2019-11510

Automated script for Pulse Secure SSL VPN exploit (CVE-2019-11510) using hosts retrieved from Shodan API. You must have a Shodan account to use this script.

PoC for CVE-2019-11510 | Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure vulnerability

CVE-2025-65964复现

CVE-2025-65964-poc

CVE-2025-65964

CVE-2025-65964-POC

CVE-2025-65964 PoC - Malicious Git Hooks

poc for cve-2020-0022

CVE-2020-0022 vulnerability exploitation on Bouygues BBox Miami (Android TV 8.0 - ARM32 Cortex A9)

This is a RCE bluetooth vulnerability on Android 8.0 and 9.0

A fully public exploit of the CVE-2020-0022 BlueFrag Android RCE Vulnerability (tested on Pixel 3 XL)

cve-2020-0022相关的一些东西

BlueFrag experiments

cve-2020-0022

Python script for Testing CVE-2025-55184

OpsGuard eliminates the "3 AM PagerDuty" nightmare, specifically protecting against threats like the recent CVE-2025-55184 (Next.js DoS)

Target Code + Exploit

XXE through a specific endpoint /geoserver/wms operation GetMap - Geoserver

A new way to exploit CVE-2025-58360 bypass WAF

CVE-2025-58360

Passive detection for CVE-2025-58360

Gerapy prior to version 0.9.8 is vulnerable to remote code execution. This issue is patched in version 0.9.8.

Proof of Concept exploit for CVE‑2021‑43857: Authenticated Remote Code Execution in Gerapy (<0.9.8). Updated and automated version of the original Exploit‑DB P…

CVE-2021-43857(gerapy命令执行)

Optimized exploit for CVE-2021-43857 affecting Gerapy < 0.9.8

WP Query Console <= 1.0 - Unauthenticated Remote Code Execution

This is a exploit for CVE-2024-50498

Unauthenticated 0-click RCE exploit for CVE-2024-50498. Exploits a code injection vulnerability in the LUBUS WP Query Console plugin to execute arbitrary PHP c…

aiohttp LFI (CVE-2024-23334)

A proof of concept of the path traversal vulnerability in the python AioHTTP library =< 3.9.1

CVE-2024-23334

Proof-of-Concept for LFI/Path Traversal vulnerability in Aiohttp =< 3.9.1

A proof of concept of the LFI vulnerability on aiohttp 3.9.1

Bash script to automate Local File Inclusion (LFI) attacks on aiohttp server version 3.9.1.

Exploitation scripts for the CrushFTP CVE-2025-54309: vulnerability

CrushFTP AS2 Authentication Bypass

Findings & july race with 0day in wild