Every new exploit,
on the radar.

An exploit for Apache Struts CVE-2018-11776

Working Python test and PoC for CVE-2018-11776, includes Docker lab

This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers.

Proof of Concept for CVE-2018-11776

Critical Remote Code Execution Vulnerability (CVE-2018-11776) Found in Apache Struts.

A simple exploit for Apache Struts RCE S2-057 (CVE-2018-11776)

Creating a vulnerable environment and the PoC

Vulnerable docker container for CVE-2018-11776

In OctoPrint version <=1.11.2, an attacker with file upload access (e.g., valid API key or session) can craft a malicious filename that bypasses sanitization a…

This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.

7-Zip Mark-of-the-Web绕过漏洞PoC(CVE-2025-0411)

CVE-2025-0411 7-Zip Mark-of-the-Web Bypass

Rust Macros No Recoil Guide 🚀 Boost Aim Like a Pro in C and Python

OS Command Injection Vulnerability via Plugin Execution in Figma Desktop Application

exploit SQL injection ELEX WooCommerce Google Shopping

FOGProject Authentication bypass CVE-2025-58443 Exploit

PoC of CVE-2025-47533 Clobber RCE

CVE-2024-47533 is a critical authentication bypass vulnerability in Cobbler (versions 3.0.0 to before 3.2.3 and 3.3.7) allowing unauthenticated remote code exe…

CVE-2024-47533: Cobbler Authentication Bypass & Code Execution

PoC of CVE-2025-47533 Clobber RCE

CVE-2024-22722 RCE via SSTI, automated with Python.

PoC for Nginx 0.6.18 - 1.20.0 Memory Overwrite Vulnerability CVE-2021-23017

nginx 1.15.10 patch against cve-2021-23017 (ingress version)

The issue only affects nginx if the "resolver" directive is used in the configuration file. Further, the attack is only possible if an attacker is able to forg…

vulnerability in NGINX servers (versions 0.6.18–1.20.0). The scripts aim to cause a Denial of Service (DoS) by sending malicious DNS responses, with enhancemen…

NGINX Security Hardening & Vulnerability Remediation Analysis of critical CVEs (CVE-2021-23017, HTTP/2 DoS flaws) in outdated NGINX versions, with actionable …

This script exploits the CVE-2024-40094 vulnerability in graphql-java

An analysis and demonstration of the unauthenticated SQL Injection vulnerability (CVE-2022-3141) in ACS EDU 3rd Gen.

SQLi in ScienceLogic

Miraculous Core (kamleshyadav) ≤ 2.0.7 — Unauthenticated Privilege Escalation

CVE-2025-2502 / CNVD-2025-16450 联想电脑管家权限提升漏洞

POC for the vuln CVE-2025-22131

PoC for CVE-2025-22131

This is a EXP For CVE-2025-57576. PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site > Scripting (XSS) in /admin/updateorder.php

Remote Code Execution (RCE) via Polyglot File Attack and Null Byte Injection on Laravel FileManager

Real-world patching workflow for CVE-2025-32709. From hotfix install to SIEM alert validation—this repo documents every step with screenshots, commands, and de…