Every new exploit,
on the radar.

spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP,CVE-2022-22963

CVE-2022-22963 PoC

CVE-2022-22963 is a vulnerability in the Spring Cloud Function Framework for Java that allows remote code execution. This python script will verify if the vuln…

Spring Cloud Function Vulnerable Application / CVE-2022-22963

CVE-2022-22963 Spring-Cloud-Function-SpEL_RCE_exploit

This includes CVE-2022-22963, a Spring SpEL / Expression Resource Access Vulnerability, as well as CVE-2022-22965, the spring-webmvc/spring-webflux RCE termed …

CVE-2022-22947

CVE-2022-22947 注入Godzilla内存马

Spring Cloud Gateway 远程代码执行漏洞Exp Spring_Cloud_Gateway_RCE_Exp-CVE-2022-22947

CVE-2022-22947批量

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947） 注入哥斯拉内存马

Spring Cloud Gateway < 3.0.7 & < 3.1.1 Code Injection (RCE)

CVE-2022-22947_EXP,CVE-2022-22947_RCE,CVE-2022-22947反弹shell,CVE-2022-22947 getshell

SpringCloudGatewayRCE - CVE-2022-22947 / Code By:Tas9er

Spring Data Commons RCE 远程命令执行漏洞

POC for CVE-2018-1273

Environment for CVE-2018-1273 (Spring Data Commons)

cve-2018-1273

Vulhub spring/CVE-2018-1273: Spring Data Commons SpEL Injection (CVE-2018-1273), run with Isoloom

burpsuite 的Spring漏洞扫描插件。SpringVulScan：支持检测：路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977

Vulhub spring/CVE-2016-4977: Spring Security OAuth2 Whitelabel SpEL RCE (CVE-2016-4977), run with Isoloom

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020…

Solr_CVE-2019-17558

CVE-2019-17558 Solr模板注入漏洞图形化一键检测工具。CVE-2019-17558 Solr Velocity Template Vul POC Tool.

Apache Solr 1.4 Injection to get a shell

Vulhub solr/CVE-2019-17558: Apache Solr Velocity Template RCE (CVE-2019-17558), run with Isoloom

Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener com…

Vulhub solr/CVE-2017-12629-RCE: Apache Solr RunExecutableListener RCE (CVE-2017-12629), run with Isoloom

CVE-2016-4437-Shiro反序列化爆破模块和key,命令执行，反弹shell的脚本

一个针对shiro反序列化漏洞(CVE-2016-4437)的快速利用工具/A simple tool targeted at shiro framework attacks with ysoserial.

Python POC to Exploit CVE-2016-4437 Apache Shiro Deserialization Vulnerability Due to Hardcode Encryption Key

这是基于cve-2016-4437简单的漏洞复现代码

1.验证CVE-2016-4437、2.解析rememberMe的文件和CBC加密的IV偏移

Vulhub shiro/CVE-2016-4437: Shiro 1.2.4 rememberMe deserialization, run with Isoloom

SambaCry exploit and vulnerable container (CVE-2017-7494)

Remote root exploit for the SAMBA CVE-2017-7494 vulnerability

Proof-of-Concept exploit for CVE-2017-7494(Samba RCE from a writable share)

CVE-2017-7494 - Detection Scripts

It is a simple script to exploit RCE for Samba (CVE-2017-7494 ).

SambaCry (CVE-2017-7494) exploit for Samba | bind shell without Metasploit

CVE-2017-7494 python exploit

Exploit CVE-2017-7494 for Net Security course final Assignment. This would reveal the vulnerability of services that run in administrative priority on Linux.

PoC exploit of CVE-2020-11651 and CVE-2020-11652

Salt security backports for CVE-2020-11651 & CVE-2020-11652

CVE-2020-11651: Proof of Concept

CVE-2020-11651&&CVE-2020-11652 EXP

Checks for CVE-2020-11651 and CVE-2020-11652

PoC for CVE-2020-11651

CVE-2020-11651&&CVE-2020-11652 EXP

CVE-2022-0543_RCE,Redis Lua沙盒绕过 命令执行

Redis 沙盒逃逸（CVE-2022-0543）POC&EXP

redis未授权、redis_CVE-2022-0543检测利用二合一脚本

Redis RCE through Lua Sandbox Escape vulnerability

CVE-2022-0543 - Redis RCE Vulnerability home lab for Red Teaming, Penetration Testing Training with just one DOCKER

Vulhub redis/CVE-2022-0543: Redis Lua Sandbox Escape (CVE-2022-0543), run with Isoloom

CVE-2019-5418 - File Content Disclosure on Ruby on Rails

RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420)

A multi-threaded Golang scanner to identify Ruby endpoints vulnerable to CVE-2019-5418

File Content Disclosure on Rails Test Case - CVE-2019-5418

a demo for Ruby on Rails CVE-2019-5418

Ruby on Rails是一个 Web 应用程序框架,是一个相对较新的 Web 应用程序框架，构建在 Ruby 语言之上。这个漏洞主要是由于Ruby on Rails使用了指定参数的render file来渲染应用之外的视图，我们可以通过修改访问某控制器的请求包，通过“…/…/…/…/”来达到路径穿越的目的，然后再…

Rails 3 PoC of CVE-2019-5418

Rails Asset Pipeline Directory Traversal Vulnerability

Vulhub rails/CVE-2018-3760: Ruby on Rails Sprockets Path Traversal (CVE-2018-3760), run with Isoloom

CVE-2019–9193 - PostgreSQL 9.3-12.3 Authenticated Remote Code Execution

is a PoC tool designed to exploit an authenticated Remote Code Execution (RCE) vulnerability in specific versions of PostgreSQL (9.3 - 11.7)

PostgreSQL Remote Code Executuon

PoC tool designed to exploit an authenticated Remote Code Execution (RCE) vulnerability in certain versions of PostgreSQL (9.3 - 11.7)

This lab simulates CVE-2019-9193 - PostgreSQL COPY FROM PROGRAM RCE

Tool to try multiple paths for PHPunit RCE CVE-2017-9841

Masscanner for Laravel phpunit RCE CVE-2017-9841

PHPUnit RCE

(CVE-2017-9841) PHPUnit_eval-stdin_php Remote Code Execution

PHPunit Checker CVE-2017-9841 By MrMad

A Tool for scanning CVE-2017-9841 with multithread

PHPUnit CVE-2017-9841 Scanner in Go clean and fire.

RCE exploit for PHP Unit 5.6.2

MongoDB CVE-2025-14847 Heap Memory Leak Scanner | OP_COMPRESSED zlib Vulnerability | Bug Bounty & Red Team Tool

a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensitive data from vulnera…

poc for CVE-2025-14847

MongoDB 内存泄露漏洞 (CVE-2025-14847) 检测工具

Exploit lab, docker and code scanner for mongobleed Vulnerability CVE-2025-14847 plus Phoenix Security Sync tools

Academic proof-of-concept demonstrating CVE-2025-14847 for authorized security research.

CVE-2025-14847 (MongoBleed)

Explot, Lab, Scanner - external and docker container, for SMongobleed-CVE-2025-14847 plus phoenix security uploader

PHPMyAdmin v4.8.0 and v.4.8.1 LFI exploit

Modified standalone exploit ported for Python 3

这篇文章将分享一个phpMyAdmin 4.8.1版本的文件包含漏洞，从配置到原理，再到漏洞复现进行讲解，更重要的是让大家了解这些真实漏洞背后的知识。基础性文章，希望对您有所帮助！

Vulhub phpmyadmin/CVE-2018-12613: phpMyAdmin 4.8.1 local file inclusion, run with Isoloom

Exploit for CVE-2019-11043

(PoC) Python version of CVE-2019-11043 exploit by neex

php-fpm+Nginx RCE

Ladon POC Moudle CVE-2019-11043 (PHP-FPM + Ngnix)

CVE-2019-11043 PHP7.x RCE

This repository provides a dockerized infrastructure and a python implementation of the CVE-2019-11043 exploit.

Docker image and commands to check CVE-2019-11043 vulnerability on nginx/php-fpm applications.

PHP CGI Argument Injection.

PHP-CGI-REMOTE_CVE-2012-1823, UnrealIRCd, MySQL, PostgreSQL and SSH bruteforce, VSFTPD2.3.4, samba CVE-2007-2447, JAVA RMI Server, distcc daemon, misconfigured…

First script, pgp-cgi-cve-2012-1823 BASH script

CVE-2012-1823 exploit for https user password website.

A hands-on project demonstrating the setup of virtual security lab, network reconnaissance, and exploitation of CVE-2012-1823.

Exploited a known RCE vulnerability (PHP-CGI Argument Injection, CVE-2012-1823) on Metasploitable2 using Metasploit Framework, gained a shell, and documented p…

A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter.

Vulhub opentsdb/CVE-2020-35476: OpenTSDB Gnuplot Command Injection (CVE-2020-35476), run with Isoloom

A checker (site and tool) for CVE-2014-0160

Multi-threaded tool for scanning many hosts for CVE-2014-0160.

OpenSSL CVE-2014-0160 Heartbleed vulnerability test

Heartbleed (CVE-2014-0160) client exploit

Test for SSL heartbeat vulnerability (CVE-2014-0160)

OpenSSL Heartbleed (CVE-2014-0160) vulnerability scanner, data miner and RSA key-restore tools.

:broken_heart: Hearbleed exploit to retrieve sensitive information CVE-2014-0160 :broken_heart:

OpenSSL TLS heartbeat read overrun (CVE-2014-0160)

Exploit written in Python for CVE-2018-15473 with threading and export formats

OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).

Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473

OpenSSH 2.3 < 7.7 - Username Enumeration

OpenSSH 7.7 - Username Enumeration

SSH User Enumerator in Python3, CVE-2018-15473, I updated the code of this exploit (https://www.exploit-db.com/exploits/45939) to work with python3 instead of …

CVE-2018-15473 - Opensshenum is an user enumerator exploiting an OpenSsh bug

CVE-2018-15473 Exploit

Python exploit of cve-2020-7247

OpenSMTPD 6.4.0 - 6.6.1 Remote Code Execution PoC exploit

Proof Of Concept Exploit for CVE-2020-7247 (Remote Execution on OpenSMTPD < 6.6.2

OpenSMTPD version 6.6.2 remote code execution exploit

Proof of concept for CVE-2020-7247 for educational purposes.

Worm written in python, abuses CVE-2020-7247

PoC exploit for CVE-2020-7247 OpenSMTPD 6.4.0 < 6.6.1 Remote Code Execution

rce

Openfire Console Authentication Bypass Vulnerability with RCE plugin

Perform With Massive Openfire Unauthenticated Users

CVE-2023-32315-Openfire-Bypass

Tool for CVE-2023-32315 exploitation

Openfire未授权到RCE(CVE-2023-32315)复现

This repo is a PoC with to exploit CVE-2023-51467 and CVE-2023-49070 preauth RCE vulnerabilities found in Apache OFBiz.

Apache OfBiz Auth Bypass Scanner for CVE-2023-51467

A go-exploit for Apache OFBiz CVE-2023-51467

CVE-2023-51467 POC

Auto exploit script for the Java web framework OF Biz under CVE-2023-51467.

🚨 Just completed an incident report on Event ID 217: Apache OFBiz Auth Bypass and Code Injection 0-Day (CVE-2023-51467). This critical vulnerability allows att…

Vulhub ofbiz/CVE-2023-51467: Apache OFBiz Authentication Bypass to RCE (CVE-2023-51467), run with Isoloom

Vulhub node/CVE-2017-14849: Node.js 8.5.0 Path Traversal (CVE-2017-14849), run with Isoloom