Every new exploit,
on the radar.

CVE-2025-5840 Exploit Written In Python By haxerr9

CVE-2024-52940 - A zero-day vulnerability in AnyDesk's "Allow Direct Connections" feature, discovered and registered by Ebrahim Shafiei (EbraSha), exposing pub…

AnySniff is a tool for monitoring TCP connections of processes like AnyDesk on Windows. It uses the CVE-2024-52940 vulnerability to track open connections and …

Proof-of-concept for CVE-2025-22870 demonstrating HTTP proxy bypass in vulnerable versions (<0.36.0) of golang.org/x/net/http/httpproxy. Exploits improper IPv6…

Reports and POCs for CVE 2024-43570 and CVE-2024-43535

YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server.

CVE-2025-31131

CVE-2024-21006 exp

Remote Code Execution (RCE) - Oracle WebLogic 12.2.1.3.0

Wordpress SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation

EXPLOIT CVE-2025-3102

Wordpress SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation

Exploitation of an authorization bypass vulnerability in the SureTriggers plugin for WordPress versions <= 1.0.78, allowing unauthenticated attackers to create…

Detects the version of the SureTriggers WordPress plugin from exposed asset URLs and compares it to determine if it's vulnerable (<= 1.0.78).

Checks the SureTriggers WordPress plugin's readme.txt file for the Stable tag version. If the version is less than or equal to 1.0.78, it is considered vulnera…

SureTriggers <= 1.0.78 - Authorization Bypass Exploit

Exploit for CVE-2025-27580: A predictable token vulnerability in NIH BRICS through 14.0.0-67 allows unauthenticated users with a Common Access Card (CAC) to es…

Arbitrary code injection in CraftCMS Freeform 5.0.0 < 5.10.16

This is a basic ROP based exploit for CVE 2020-14871. CVE 2020-14871 is a vulnerability in Sun Solaris systems libpam library, and exploitable over ssh

This is a little Python script to detect the "EvilSun" vulnerability (CVE-2020-14871) on Solaris systems. The vulnerability is a buffer overflow in the Pluggab…

JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021

CVE-2023-42442 JumpServer Session 录像任意下载漏洞

Python tool to detect CVE-2025-5054 vulnerability in Ubuntu systems running Apport ≤ 2.32.0. Performs comprehensive security checks and provides mitigation rec…

PoC para CVE-2015-9251 jQuery menor a 3.0.0.

This repository contains a Proof of Concept (PoC) for CVE-2015-9251, a vulnerability in jQuery versions prior to 3.0.0 that allows attackers to perform Cross-S…

cve-2015-9251

Reflected XSS found by Burp Suite in several locations on SonicOS 7.0 Sonicwall NSA device.

The Eventin plugin (<= 4.0.26) for WordPress contains an unauthenticated arbitrary file read vulnerability

Mass Scaning vulnerability in Cpanel [XSS]

To filter the actual vulnerable URLs from the screenshots, you can use the ee.sh script. Simply run ./ee.sh -f "path/to/index_screenshot.txt" -k "hacked" and t…

cpanel_xss_2023 is a simple Python script designed for finding CVE-2023-29489 vulnerability in cpanel.

a pyhton script to test all results from shodan for cPanel CVE-2023-29489, credits to @assetnote, I just automate

Nuclei template for CVE-2023-29489

Exploit script for CVE-2022-41544 - RCE in get-simple CMS

Exploit script for CVE-2022-41544 in GetSimple CMS, with enhanced error handling and detailed usage instructions.

Validation of Arbitrary File Read Vulnerabilities in Dell OpenManage Server Administrator (OMSA) - CVE-2016-4004, CVE-2021-21514 and CVE-2020-5377.

CVE-2020-5377: Dell OpenManage Server Administrator File Read

Tomcat CVE-2025-46701 PoC

POC for exploit of goshs

PoC for Silverpeas <= 6.4.2 Username Enumeration

POC for exploiting CVE-2024-53703, a stack-based buffer overflow in SonicWall SMA mod_httprp.so