fankh/vulnerability-pocCVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorized security testing & research only.
Curated Proof-of-Concept (PoC) code, test labs, and prevention rules for high-severity CVEs — built for authorized security testing, penetration testing, CTF challenges, and security research.
Maintained by the SeekersLab team. Every entry ships with detection-only PoC scripts, a Docker test lab (vulnerable + patched apps), bilingual (English / 한국어) documentation, and ready-to-deploy prevention rules.
This code is provided for educational purposes, authorized penetration testing, CTF challenges, and security research only.
Do NOT use these POCs against systems without explicit written authorization. Unauthorized access to computer systems is illegal.
| CVE ID | Severity | Vendor | Description |
|---|
| CVE-2022-22963 | Critical (9.8) | VMware | Spring Cloud Function SpEL Injection RCE |
| CVE-2022-22965 | Critical (9.8) | VMware | Spring Framework RCE (Spring4Shell) |
| CVE-2022-47966 | Critical (9.8) | Zoho | ManageEngine SAML RCE |
| CVE ID | Severity | Vendor | Description |
|---|---|---|---|
| CVE-2023-20198 | Critical (10.0) | Cisco | IOS XE Web UI Privilege Escalation |
| CVE-2023-27350 | Critical (9.8) | PaperCut | NG/MF Authentication Bypass RCE |
| CVE-2023-46604 | Critical (10.0) | Apache | ActiveMQ RCE |
| CVE-2023-44487 | High (7.5) | Multiple | HTTP/2 Rapid Reset Attack |
| CVE-2023-29357 | Critical (9.8) | Microsoft | SharePoint Server Privilege Escalation |
| CVE ID | Severity | Vendor | Description |
|---|---|---|---|
| CVE-2024-21762 | Critical (9.8) | Fortinet | FortiOS SSL VPN Out-of-Bounds Write RCE |
| CVE-2024-45387 | High (8.1) | Apache | Traffic Server HTTP Request Smuggling |
| CVE-2024-50623 | Critical (9.8) | Cleo | File Transfer Unrestricted Upload RCE |
| CVE-2024-3400 | Critical (10.0) | Palo Alto | PAN-OS GlobalProtect Command Injection |
| CVE-2024-27198 | Critical (9.8) | JetBrains | TeamCity Authentication Bypass |
| CVE ID | Severity | Vendor | Description |
|---|---|---|---|
| CVE-2025-0282 | Critical (9.0) | Ivanti | Connect Secure Stack Buffer Overflow RCE |
| CVE-2025-21298 | Critical (9.8) | Microsoft | Windows OLE Remote Code Execution |
| CVE-2025-22224 | Critical (9.3) | VMware | vCenter Server Heap Overflow RCE |
| CVE-2025-24813 | Critical (9.8) | Apache | Tomcat Path Equivalence RCE |
| CVE-2025-29927 | Critical (9.1) | Vercel | Next.js Middleware Authorization Bypass |
| CVE ID | Severity | Vendor | Description |
|---|---|---|---|
| CVE-2026-33557 | Critical (9.1) | Apache | Kafka JWT Validation Bypass (OAUTHBEARER) |
vulnerability-poc/
├── README.md
├── 2022/ # 2022 CVEs (3 entries)
│ └── CVE-2022-XXXXX/
├── 2023/ # 2023 CVEs (45 entries)
│ └── CVE-2023-XXXXX/
├── 2024/ # 2024 CVEs (413 entries)
│ └── CVE-2024-XXXXX/
│ ├── README.md # English documentation
│ ├── README_KO.md # Korean documentation (한국어)
│ ├── poc.py # POC exploit code
│ └── prevention/
│ ├── README.md # Mitigation guide
│ ├── nginx.conf # Nginx prevention rules
│ ├── httpd.conf # Apache HTTPD rules
│ ├── snort.rules # Snort IDS rules
│ └── yara.yar # YARA detection rules
└── 2025/ # 2025 CVEs (1107 entries)
└── CVE-2025-XXXXX/
└── ... # Same structure as above
Each CVE includes comprehensive prevention rules for:
Each POC can be run with the --help flag to see available options:
python 2024/CVE-2024-21762/poc.py --help
python 2024/CVE-2024-21762/poc.py --check -t <target>
Deploy prevention rules to your infrastructure:
# Nginx
cp 2024/CVE-2024-21762/prevention/nginx.conf /etc/nginx/conf.d/cve-2024-21762.conf
# Apache
cp 2024/CVE-2024-21762/prevention/httpd.conf /etc/httpd/conf.d/cve-2024-21762.conf
# Snort
cat 2024/CVE-2024-21762/prevention/snort.rules >> /etc/snort/rules/local.rules
# YARA
yara 2024/CVE-2024-21762/prevention/yara.yar <target_file>
Each CVE folder includes:
Looking for deeper security support? We offer comprehensive enterprise solutions:
🌐 Learn more: Visit seekerslab.com to explore SeekersLab's cloud security and AI-powered threat management platform.
| Contact | |
|---|---|
| Community & Technical Contact | [email protected] |
For bug reports, PoC requests, and community contributions, open an issue at github.com/fankh/vulnerability-poc or reach the maintainer at [email protected].
🌐 Website: seekerslab.com
This project is licensed under the Apache License 2.0 - see the LICENSE file for details.
Please ensure any contributions include: