Every new exploit,
on the radar.

Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit

CVE-2023-33246 RocketMQ RCE Detect By Version and Exploit

Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit

A go-exploit for fetching the RocketMQ broker configuration in order to discover indicators of compromise for CVE-2023-33246

CVE-2023-33246：Apache RocketMQ 远程命令执行漏洞检测工具

CVE-2023-33246 - Apache RocketMQ config RCE

Improper Authorization Vulnerability in Confluence Data Center and Server

An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22518 Improper Authorization

Checker for CVE-2023-22518 vulnerability on Confluence

Exploit CVE-2023-22518

Lỗ hổng ủy quyền không phù hợp trong Trung tâm dữ liệu Confluence và Máy chủ + bugsBonus 🔥

Confluence CVE-2023-22518

This repository contains a Crystallographic Information File (CIF) intended for use on the "Chemistry" machine on Hack The Box (HTB).

This is a exploit for the known Remote Code Execution (RCE) vulnerability in the `pymatgen` (CVE-2024-23346) Python library by uploading a malicious `CIF` file…

PoC of the vulnerability CVE-2024-23346

This is an exploit for CVE-2024-23346 that acts as a "terminal" (tested on chemistry.htb)

A Rust exploit for CVE-2024-23346 that functions as a "terminal" (tested on chemistry.htb)

CVE-2021-32099

CVE-2021-32099 SQL Injection allow attacker bypass login. From HTB with love

Just for HTB

CVE-2021-32099

PoC for CVE-2021-32099

Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-2021-45046)

Log4j 2.15.0 Privilege Escalation -- CVE-2021-45046

Public testing data. Samples of log4j library versions to help log4j scanners / detectors improve their accuracy for detecting CVE-2021-45046 and CVE-2021-442…

Log4Shell / Log4J Payload - CVE-2021-45046 and CVE-2022-42889

Oh no another one

Log4Shell(CVE-2021-45046) Sandbox Signature

Replicating CVE-2021-45046

Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.

Designed for Demonstration of Deep Exploitation.

CVE-2025-32756: NSE Scanning for RCE in vulnerable FortiVoice, FortiMail, FortiNDR, FortiRecorder and FortiCamera nodes

Automatic Mass Tool for checking vulnerability in CVE-2022-1386 - Fusion Builder < 3.6.2 - Unauthenticated SSRF

Fusion Builder < 3.6.2 - Unauthenticated SSRF

Unauthenticated SSRF PoC in WordPress Fusion Builder <3.6.2 (CVE-2022-1386)

Exploit for CVE-2024-20767 - Adobe ColdFusion

Exploit Toolkit for Adobe ColdFusion CVE-2024-20767 Vulnerability

Proof of Concept for CVE-2024-20767. Arbitrary file read from Adobe ColdFusion

Exploit for CVE-2024-20767 affecting Adobe ColdFusion

CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!

exploit by python

a scenario based on CVE-2022-25845 yielding a TP for metadata based SCA but a FN if the callgraph is used

A tool designed to detect the vulnerability **CVE-2025-31650** in Apache Tomcat (versions 10.1.10 to 10.1.39)

CVE-2025-31650 PoC

CVE-2025-31650

Linux privilege escalation exploit via snapd (CVE-2019-7304)

Payload Generator

Another implementation for linux privilege escalation exploit via snap(d) (CVE-2019-7304)

Local Privilege Escalation via snapd (CVE-2019-7304) Remastered PoC exploit

Exploiting the vulnerability called "Dirty_Sock" (CVE-2019-7304) in the REST API for Canonical's snapd daemon.

POC exploit code for CVE-2020-1048(PrintDemon)

PoC for CVE-2009-0229 "Print Spooler Read File Vulnerability" LPE AFR (related to CVE-2020-1048)

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Prin…

PrintDemon (CVE-2020-1048) Privilege Escalation

spoolsv.exe arb file write poc

Win10 20H2 LPE for CVE-2021-31956

fodhelper-based UAC bypass poc for CVE-2021-31956, registry keys to SYSTEM without a prompt. educational

Kernel Pool Overflow Exploit targeting CVE-2021-31956

Wordpress SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation

EXPLOIT CVE-2025-3102

Wordpress SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation

Exploitation of an authorization bypass vulnerability in the SureTriggers plugin for WordPress versions <= 1.0.78, allowing unauthenticated attackers to create…

Detects the version of the SureTriggers WordPress plugin from exposed asset URLs and compares it to determine if it's vulnerable (<= 1.0.78).

Checks the SureTriggers WordPress plugin's readme.txt file for the Stable tag version. If the version is less than or equal to 1.0.78, it is considered vulnera…

SureTriggers <= 1.0.78 - Authorization Bypass Exploit

Mass Scaning vulnerability in Cpanel [XSS]

To filter the actual vulnerable URLs from the screenshots, you can use the ee.sh script. Simply run ./ee.sh -f "path/to/index_screenshot.txt" -k "hacked" and t…

cpanel_xss_2023 is a simple Python script designed for finding CVE-2023-29489 vulnerability in cpanel.

a pyhton script to test all results from shodan for cPanel CVE-2023-29489, credits to @assetnote, I just automate

Nuclei template for CVE-2023-29489

A standalone POC for CVE-2019-12840

PoC for Webmin Package Update Authenticated Remote Command Execution

Webmin Exploit Scanner CVE-2020-35606 CVE-2019-12840

CVE-2019-12840

POC: CVE-2019-12840 (Authenticated RCE - Webmin Package Updates)

Esto es una prueba de concepto propia i basica de la vulneravilidad CVE-2019-12840 la qual te da un RCE en root

Authenticated Remote Command Execution - Webmin <= 1.910

CVE-2020-10199 Nexus <= 3.21.1 远程代码执行脚本(有回显)

CVE-2020-10199、CVE-2020-10204、CVE-2020-11444

CVE-2020-10199 回显版本

CVE-2020-10199、CVE-2020-10204漏洞一键检测工具，图形化界面。CVE-2020-10199 and CVE-2020-10204 Vul Tool with GUI.

CVE-2020-10199 CVE-2020-10204 Python POC

Sonatype Nexus 3.21.01 - Remote Code Execution (Authenticated - Updated)

CVE-2022-24112：Apache APISIX apisix/batch-requests RCE

Apache APISIX Remote Code Execution (CVE-2022-24112) proof of concept exploit

Apache APISIX < 2.12.1 Remote Code Execution and Docker Lab

Apache APISIX batch-requests RCE(CVE-2022-24112)

CVE-2022-24112: Apache APISIX Remote Code Execution Vulnerability

CVE-2022-24112_POC

Apache APISIX 2.12.1 Remote Code Execution by IP restriction bypass and using default admin AIP token

New exploit for Apache APISIX v2.12.1 - Remote code execution (RCE)

Mitel MiCollab 企业协作平台 任意文件读取漏洞(CVE-2024-41713)由于Mitel MiCollab软件的 NuPoint 统一消息 (NPM) 组件中存在身份验证绕过漏洞，并且输入验证不足，未经身份验证的远程攻击者可利用该漏洞执行路径遍历攻击，成功利用可能导致未授权访问、破坏或删除用户的数据…

cve-2024-CVE-2024-41713

A Python script to detect CVE-2024-41713, a directory traversal vulnerability in Apache HTTP Server, enabling unauthorized access to restricted resources. This…

Mitel MiCollab Authentication Bypass to Arbitrary File Read

PoC for the CVE-2022-41080 , CVE-2022-41082 and CVE-2022-41076 Vulnerabilities Affecting Microsoft Exchange Servers

Nmap scripts to detect exchange 0-day (CVE-2022-41082) vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability.

CVE-2022-41082-poc

Exchange CVE '22

https & http

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-Ultra…

[CVE-2020-14882] Oracle WebLogic Server Authenticated Remote Code Execution (RCE)

Weblogic 身份认证绕过漏洞批量检测脚本

用于对WebLogic(10.3.6.0.0 ;12.1.3.0.0 ;12.2.1.3.0; 12.2.1.4.0 ;14.1.1.0.0)进行验证及利用

A vulnerability scanner that detects CVE-2020-14883 vulnerabilities.

oracle weblogic

S2-061 的payload，以及对应简单的PoC/Exp

S2-061 CVE-2020-17530

CVE-2020-17530-strust2-061

Apache Struts2框架是一个用于开发Java EE网络应用程序的Web框架。Apache Struts于2020年12月08日披露 S2-061 Struts 远程代码执行漏洞（CVE-2020-17530），在使用某些tag等情况下可能存在OGNL表达式注入漏洞，从而造成远程代码执行，风险极大。提醒我校A…

(cve-2020-17530) struts2_s2-061 freemarker_RCE testscript

POC of CVE-2017-5487 + tool

WordPress CVE-2017-5487 Exploit in Python

Wordpress Username Enumeration /CVE-2017-5487,WordPress < 4.7.1 -

Wordpress Username Enumeration /CVE-2017-5487,WordPress < 4.7.1 -

This is a vulnerability in the Linux kernel that was discovered and disclosed in 2017.

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listi…

cve-2017-5487 wp rest api 취약점

Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.

Get root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug), using the testcase extracted from Apple's XNU source.

CVE-2022-46689

CVE-2022-46689

File Manager for CVE-2022-46689

CVE-2022-46689

CVE-2022-46689

iOS customization app powered by CVE-2022-46689

CVE-2023-45878 GibbonEdu Arbitrary File Write

GibbonEdu Arbitrary File Write to Remote Code Execution

This script chains and automates Arbitrary File Write to RCE on Gibbon LMS through CVE-2023-45878 exploitation.

CVE-2023-45878 easy exploit | revers sehell

CVE-2023-45878 poc for gibbon LMS on xampp windows

PoC - Arbitrary File Write in Gibbon LMS for RCE (CVE-2023-45878)