Every new exploit,
on the radar.

Detection for CVE-2025-52691

An enhanced proof-of-concept exploit for CVE-2025-52691 (SmarterMail Arbitrary File Upload RCE) with APT-level features like stealth obfuscation, persistence, …

This repository contains a safe Proof of Concept (PoC) to detect vulnerable SmarterMail versions affected by CVE‑2025‑52691. The script performs version detec…

CVE-2025-52691 Scanner - Detects vulnerable SmarterMail installations (CVSS 10.0 RCE)

CVE-2025-52691

Exploits Really Simple Security < 9.1.2 authentication bypass (CVE-2024-10924).

Unauthenticated authentication bypass to RCE exploit for CVE-2024-10924. Abuses an authentication and 2FA bypass in the Really Simple Security WordPress plugin…

WARNING: This is a vulnerable application to test the exploit for the Really Simple Security < 9.1.2 authentication bypass (CVE-2024-10924). Run it at your own…

Bypass del MFA en WordPress con el plugin Really Simple Security instalado entre las versiones 9.0.0 – 9.1.1.1.

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass

Vulnerable docker container for Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass CVE-2023-50164

An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution

An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution

Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287/Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538

An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution

Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538

Cve-2015-1538-1

An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution

A script to automate privilege escalation with CVE-2023-22809 vulnerability

CVE-2023-22809 Linux Sudo

Analysis & Exploit

Running this exploit on a vulnerable system allows a local attacker to gain a root shell on the machine.

Automates vulnerability check for sudo versions and privilege escalation via sudoedit if exploitable, helping users test and gain root access.

CVE-2024-25641 - RCE Automated Exploit - Cacti 1.2.26

This repository automates the process of exploiting CVE-2024-25641 on Cacti 1.2.26

Fully automated PoC - CVE-2024-25641 - RCE - Cacti < v1.2.26 🌵

PoC for CVE-2024-25641 Authenticated RCE on Cacti v1.2.26

POC exploit for CVE-2024-25641

Cacti exploit

PoC for CVE-2019-5736

Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)

CVE-2019-5736 POCs

runc容器逃逸漏洞预警

getshell test

Code sample for using exploit CVE-2019-5736 to mine bitcoin with no association to original container or user.

Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具，采用JDK 1.8+NetBeans8.2开发，软件运行必须安装JDK 1.8或者以上版本。 支持：weblogic xml反序列化漏洞 CVE-2017-10271/CNVD-C-2019-48814/CVE-2019-2725检查。

CVE-2019-2725 命令回显

CVE-2019-2725poc汇总 更新绕过CVE-2017-10271补丁POC

Weblogic CVE-2019-2725 CVE-2019-2729 Getshell 命令执行

WebLogic Insecure Deserialization - CVE-2019-2725 payload builder & exploit

weblogic绕过和wls远程执行

CVE-2019-2725 bypass pocscan and exp

PoC exploit for CVE-2018-11235 allowing RCE on git clone --recurse-submodules

CVE-2018-11235-Git PoC

Auto malicious git repository creation to exploit CVE-2018-11235 a Remote Code Execution using Git Sub module.

Proof of Concept - RCE Exploitation : Git submodules' names vulnerability - Ensimag November 2018

CVE-2018-11235（PoC && Exp）

RCE vulnerability to exec "git clone --recurse-submodule" (CVE-2018-11235)

for git v2.7.4

POC CVE-2024-46982

Comprehensive demonstration of CVE-2025-32421 Eclipse technique - a sophisticated race condition attack against Next.js 15.0.4 that bypasses the original CVE-2…

The CVE-2024-46982 is cache poisoning of next_js some site have API to load their image

Reproduction of CVE-2024-46982

Ruby on Rails Web Console (v2) Whitelist Bypass Code Execution implementation in Python

Modification of Metasploit module for RCE in Ruby-On-Rails Console CVE-2015-3224

CVE-2015-3224 Exploit - Rails Web Console RCE

CVE-2015-3224

Ruby on Rails Web Console Exploit (CVE-2015-3224)

Apache Spark Shell Command Injection Vulnerability

cve-2022-33891-poc

「💥」CVE-2022-33891 - Apache Spark Command Injection

CVE-2022-33891 Exploit For Apache Spark

Apache Spark RCE - CVE-2022-33891

PoC for CVE-2022-33891

For CVE-2022-33891 Apache Spark: Emulation and Detection by West Shepherd

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administr…

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted reso…

Mitigation validation utility for the Ivanti Connect Around attack chain. Runs multiple checks. CVE-2023-46805, CVE-2024-21887.

POC Checker for ivanti CVE-2024-21887 Command injcetion

The script in this repository only checks whether the vulnerabilities specified in the Ivanti Connect Secure product exist.

A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282, CVE-2023-46805, an…

Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.

CVE-2024-21887 Exploitation with Ngrok Reverse Shell

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、C…

Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch

Weblogic 反序列化漏洞(CVE-2018-2628)

CVE-2018-2628 & CVE-2018-2893

CVE-2018-2628

WebLogic WLS核心组件反序列化漏洞多线程批量检测脚本 CVE-2018-2628-MultiThreading

漏洞利用工具

Proof-of-Concept (PoC) for CVE-2025-29306, a Remote Code Execution vulnerability in FoxCMS. This Python script scans single or multiple targets, executes comma…

Mass Exploit for CVE-2025-29306

This tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()` on attacker-controlled input leading to remote code execution.

PoC for CVE-2018-15133 (Laravel unserialize vulnerability)

Exploit for Laravel Remote Code Execution with API_KEY (CVE-2018-15133)

Laravel RCE exploit. CVE-2018-15133

Laravel-PHP-Unit-RCE (CVE-2018-15133) Auto Exploiter and Shell Uploader

Cette exploit en python va vous permettre de créer des listes de sites et les exploiter rapidement.

CVE-2018-15133 (Webased)

A weaponized version of CVE-2018-9206

A Python PoC for CVE-2018-9206

cve-2018-9206

jquery file upload poc

CVE-2023-0669 GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrar…

GoAnywhere MFT CVE-2023-0669 LicenseResponseServlet Deserialization Vulnerabilities Python RCE PoC(Proof of Concept)

CVE analysis for CVE-2023-0669

CVE-2023-0669 GoAnywhere MFT command injection vulnerability

POC for CVE-2025-13486

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via the prepare_form() fun…

Advanced Custom Fields Extended (ACFE) WordPress Plugin Exploit RCE - Admin Creation

CVE-2025-13486 - Remote Code Execution & Privilege Escalation exploit

Vulnerable setup for CVE-2025-13486 - Advanced Custom Fields: Extended - Remote Code Execution

Docker test environment for CVE-2025-13486 (ACF Extended RCE). For security research only.

CVE-2025-33053 Proof Of Concept (PoC)

Proof-of-Concept for CVE-2025-33053 Exploiting WebDAV with .url file delivery to demonstrate realistic remote code execution. Includes a decoy PDF payload and…

CVE-2025-33053 Checker and PoC

POC exploit for CVE-2025-33053 (external control of file execution path in URL file)

POC for CVE-2025-33053 WebDav Exploit, demonstrating how the vulnerability can be triggered in a real environment. This repository focuses on hands-on exploita…

Apache Solr SSRF(CVE-2021-27905)

[CVE-2021-27905] Apache Solr ReplicationHandler Server Side Request Forgery (SSRF)

POC for LFI related to CVE-2021-27905

Apache Solr < 8.8.2 Server Side Request Forgery

CVE-2021-27905

Blueborne CVE-2017-0785 Android information leak vulnerability

CVE-2017-0785 BlueBorne PoC

Scan/Exploit Blueborne CVE-2017-0785

upgraded of BlueBourne CVE-2017-0785 to python3

CVE-2017-0785: BlueBorne PoC

Simply diff for CVE-2017-0785

PoC CVE-2017-5123 - LPE - Bypassing SMEP/SMAP. No KASLR

Exploit for the linux kernel vulnerability CVE-2017-5123

Source code and configuration files related to our article in MISC96

linux kernel exploit

Proof of Concept for CVE-2025-6218, demonstrating the exploitation of a vulnerability in WinRAR versions 7.11 and under, involving improper handling of archive…

CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user ext…

A simple proof of concept for WinRAR Path Traversal | RCE | CVE-2025-6218

RARLAB WinRAR Directory Traversal Remote Code Execution

Comprehensive analysis and proof-of-concept for CVE-2025-6218 - WinRAR path traversal RCE vulnerability affecting versions 7.11 and earlier

exploit for f5-big-ip RCE cve-2023-46747

#F5-BIG-IP-CVE-2023-46747-Exploit – Unauthenticated RCE Python exploit & Nuclei template by Raguraman ✓ Automated TCP reverse shell (LHOST/LPORT) ✓ Teste…

An Exploitation script developed to exploit the CVE-2023-46747 which Pre Auth Remote Code Execution of f5-BIG Ip producs

CVE-2023-46747 Criticle Auth Bypass

CVE-2023-46747-RCE PoC

File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read

Unauthenticated Arbitrary File Read exploit for WordPress File Away Plugin ≤ 3.9.9.0.1

CVE-2025-2539 - WordPress File Away <= 3.9.9.0.1 - Arbitrary File Read

CVE-2025-2539 - File Away WordPress Plugin Arbitrary File Read