Every new exploit,
on the radar.

Python exploit for the CVE-2021-22204 vulnerability in Exiftool

Exploit for CVE-2021-22204 (ExifTool) - Arbitrary Code Execution

exiftool arbitrary code execution vulnerability

exiftool exploit

POC for exiftool vuln (CVE-2021-22204).

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]

CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit

Detect and log CVE-2019-19781 scan and exploitation attempts.

Test a host for susceptibility to CVE-2019-19781

Indicator of Compromise Scanner for CVE-2019-19781

Citrix ADC Remote Code Execution

Indicator of Compromise Scanner for CVE-2019-19781

Concurrent network scanner for CVE-2015-1635

MS15-034 HTTP.sys 远程执行代码检测脚本（MS15-034 HTTP.sys remote execution code poc script）

CVE-2015-1635,MS15-034

CVE-2015-1635

CVE-2015-1635-POC，指定IP与端口验证HTTP.sys漏洞是否存在

Microsoft Windows 'HTTP.sys' - Remote Code Execution

:fire: A checker site for MS15-034 / CVE-2015-1635.

PoC for SQL Injection in CVE-2024-27956

Perform with massive Wordpress SQLI 2 RCE

CVE-2024-27956 WordPress Automatic < 3.92.1 - Unauthenticated SQL Injection

WordPress Automatic Plugin <= 3.92.0 - SQL Injection

CVE-2024-27956 - WP Automatic SQL Injection Exploit Tool

CVE-2024-27956 WORDPRESS RCE PLUGIN

Script to exploit Grafana CVE-2025-4123: XSS and Full-Read SSRF

CVE-2025-4123 - Grafana Tool

Grafana CVE-2025-4123-POC

CVE-2025-4123 Grafana Open Redirect Exploit

CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)

Wazuh 8.4 CVE-2025-24016

CVE-2025-24016: RCE in Wazuh server! Remote Code Execution

A critical RCE vulnerability has been identified in the Wazuh server due to unsafe deserialization in the wazuh-manager package. This bug affects Wazuh version…

Detection for CVE-2025-24016 - Deserialization of Untrusted Data Vulnerability in the Wazuh software

CVE-2025-24016: RCE in Wazuh server! Remote Code Execution

Apache OFBIZ Path traversal leading to RCE POC[CVE-2024-32113 & CVE-2024-36104]

Apache OfBiz vulns

CVE-2024-32113 Apache OFBIZ Batch Scanning

CVE-2024-32113 & CVE-2024-38856

CVE-2024-32113-Apache-OFBiz<18.12.13-Exploit

Scripts for Analysis of a RCE in Moodle Calculated Questions (CVE-2024-43425)

🚀 Exploit for Moodle 4.4.0 Authenticated RCE (CVE-2024-43425) — run commands remotely ⚡

Apache OFBiz RCE Scanner & Exploit (CVE-2024-38856)

CVE-2024-38856 Exploit

Apache OFBiz CVE-2024-38856

CVE-2024-38856: Apache OFBiz remote code execution Scanner & Exploit

Perform With Massive Apache OFBiz Zero-Day Scanner & RCE

Exploit for CVE-2024-38856 affecting Apache OFBiz versions before 18.12.15

Nuclei template to scan for Apache Ofbiz affecting versions before 18.12.15

Tentang Pemindai & Eksploitasi Apache OFBiz RCE (CVE-2024-38856)

Proof-of-Concept exploit (SQLI BookingPress before 1.0.11)

🐍 Python Exploit for CVE-2022-0739

Simple bash script to automate the exploit of cve 2022 0739

Exploit for WP BookingPress (< 1.0.11) based on destr4ct POC.

CVE-2022-0739 Wordpress BookingPress SQLi

BookingPress < 1.0.11 - Unauthenticated SQL Injection

This is POC for IOS 0click CVE-2025-43300

CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption

This is POC for IOS 0click CVE-2025-43300

CVE-2019-3396 confluence SSTI RCE

Confluence 未授权 RCE (CVE-2019-3396) 漏洞

Confluence Widget Connector RCE

Confluence Widget Connector path traversal (CVE-2019-3396)

Confluence unauthorize template injection

CVE-2019-3396 Memshell for Behinder

Confluence Widget Connector RCE

One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html

poc of CVE-2022-33679

poc of CVE-2022-33679

Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion

Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion

Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion

exploit script for job manager plugin of wordpress

Evangelos Mourikis POC for CVE-2015-6668 converted for Python 3

CVE-2015-6668, relacionada con el plugin WP Job Manager para WordPress (versiones ≤ 0.7.25).

A small Rust CLI that reproduces the information-disclosure pattern associated with CVE-2015-6668 (Job Manager <= 0.7.25).

CVE-2017-13156-Janus复现

A collection of tools for the Janus exploit [CVE-2017-13156].

To determine if an APK is vulnerable to CVE-2017-13156

Android Application Vulnerability Exploit

Comprehensive Android security vulnerability demonstrations featuring CVE-2017-13156 (Janus), broadcast receiver exploitation, external storage threats, and ro…

Exploit for CVE-2023-3460. Unauthorized admin access for Ultimate Member plugin < v2.6.7

Exploit and scanner for CVE-2023-3460

Exploit for the vulnerability of Ultimate Member Plugin.

Mass CVE-2023-3460.

CVE-2023-3460

GitHub repository for CVE-2023-3460 POC

[CVE-2024-4956] Nexus Repository Manager 3 Unauthenticated Path Traversal Bulk Scanner

POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal

CVE-2024-4956 Python exploitation utility

CVE-2024-4956 Nuclei Template

Unauthenticated Path Traversal in Nexus Repository 3

CVE-2024-4956 : Nexus Repository Manager 3 poc exploit

Sonatype Nexus Repository Manager 3 (LFI)

Unauthenticated Path Traversal in Nexus Repository 3

An exploit for Apache Struts CVE-2018-11776

Working Python test and PoC for CVE-2018-11776, includes Docker lab

This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers.

Proof of Concept for CVE-2018-11776

Critical Remote Code Execution Vulnerability (CVE-2018-11776) Found in Apache Struts.

A simple exploit for Apache Struts RCE S2-057 (CVE-2018-11776)

Creating a vulnerable environment and the PoC

Vulnerable docker container for CVE-2018-11776

This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.

7-Zip Mark-of-the-Web绕过漏洞PoC(CVE-2025-0411)

CVE-2025-0411 7-Zip Mark-of-the-Web Bypass

Rust Macros No Recoil Guide 🚀 Boost Aim Like a Pro in C and Python

CVE-2024-47533 is a critical authentication bypass vulnerability in Cobbler (versions 3.0.0 to before 3.2.3 and 3.3.7) allowing unauthenticated remote code exe…

CVE-2024-47533: Cobbler Authentication Bypass & Code Execution

PoC of CVE-2025-47533 Clobber RCE

PoC for Nginx 0.6.18 - 1.20.0 Memory Overwrite Vulnerability CVE-2021-23017

nginx 1.15.10 patch against cve-2021-23017 (ingress version)

The issue only affects nginx if the "resolver" directive is used in the configuration file. Further, the attack is only possible if an attacker is able to forg…

vulnerability in NGINX servers (versions 0.6.18–1.20.0). The scripts aim to cause a Denial of Service (DoS) by sending malicious DNS responses, with enhancemen…

NGINX Security Hardening & Vulnerability Remediation Analysis of critical CVEs (CVE-2021-23017, HTTP/2 DoS flaws) in outdated NGINX versions, with actionable …

Researching on the vulnrability CVE-2023-26136

Fix open source package uses tough-cookie 2.5.0 - CVE-2023-26136,

Fix prototype pollution vulnerability (CVE-2023-26136) for tough-cookie package

CVE-2023-26136 vulnerability research

This repository contains a solution for the CVE-2023-26136 vulnerability.

ecurity patch for CVE-2023-26136 in tough-cookie 2.5.0 - Prototype pollution vulnerability fix with backward compatibility

CVE-2023-35078 Remote Unauthenticated API Access Vulnerability Exploit POC

Proof of concept script to check if the site is vulnerable to CVE-2023-35078

Tools to scanner & exploit cve-2023-35078

Nmap script to exploit CVE-2023-35078 - Mobile Iron Core

CVE-2023-35078 - Ivanti MobileIron Core Remote Unauthenticated API Access Exploit tool

Easy and non-intrusive script to check for CVE-2023-35078

Ivanti Endpoint Manager Mobile (EPMM) POC

Nibbleblog 4.0.3 - Arbitrary File Upload (CVE-2015-6967)

An exploit for the Nibbles manager version 4.0.3. This exploit allows RCE to be performed.

In this repository you will find the technical report of Nibbles, the exploit to abuse the CVE-2015-6967 and an autopwn tool in case you want to resolve the ma…

CVE-2015-6967 PoC Exploit