Tools

dptsec/cve-2025-10230

Proof-of-concept exploit for CVE-2025-10230, a Samba WINS hook command injection vulnerability, demonstrating limited 15-character command execution.

timorlover/cve-2023-23333

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions …

dkstar11q/ashwesker-cve-2026-20045

Proof-of-concept exploit for CVE-2026-20045, a critical unauthenticated RCE in Cisco Unified Communications products, enabling command injection and…

xie-22/cve-2025-4428

Ivanti EPMM Pre-Auth RCE Chain

chebuya/cve-2024-28741-northstar-agent-rce-poc

Agent RCE PoC for CVE-2024-28741, a stored XSS vulnerability in NorthStar C2.

h00die/poc-cve-2026-19681

Proof-of-concept exploit for authenticated command injection in file upload processing, demonstrating two-step chain via REST API with blind timing…

malwareman007/cve-2023-20887

VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)

murataydemir/cve-2021-22123

[CVE-2021-22123] Fortinet FortiWeb Authenticated OS Command Injection

akash0x00/zoneminder-1.29-1.30-rce-exploit

Unauthenticated SQL injection to RCE exploit for ZoneMinder 1.29/1.30 (CVE-2016-10204, EDB-41239). Single-command SQLi to webshell to reverse shell…

h00die/poc-cve-2026-19679

Proof-of-concept exploit for CVE-2026-19679, an insufficient filename sanitization vulnerability in audit-file upload leading to command injection.…

affix/cve-2022-36231

pdf_info <= 0.5.3 OS Command Injection

kevthehermit/cve-2020-11651

PoC for CVE-2020-11651

chocapikk/opendcim-exploit

openDCIM install.php SQLi to RCE chain (CWE-862 + CWE-89 + CWE-78)

m3ph1569/cve-2026-39987-poc

CVE-2026-39987 Exploitation Tool - Marimo < 0.23.0 Pre-Auth RCE (WebSocket)

s0tr/cve-2023-33782

Proof-of-concept exploit for a command injection vulnerability (CVE-2023-33782) in D-Link DIR-842V2 router's iperf3 diagnostics, enabling remote code…

asjidkalam/cve-2020-8958

CVE-2020-8958: Authenticated RCE exploit for NetLink HG323

jakabakos/cve-2024-27348-apache-hugegraph-rce

Python exploit and detection script for CVE-2024-27348, a remote code execution vulnerability in Apache HugeGraph Server via the Gremlin traversal…

isafeblue/freeswitch_rce

freeswitch all version remote command execute (cve-2018-19911)