Tools

kaist-hacking/cve-2023-6702

Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace (v8ctf submission)

sadfud/exploits

Real world and CTFs exploiting web/binary POCs.

cipherspy/cve-2026-42945-poc

exploit for CVE-2026-42945

spritualkb/cve-2025-55182-exp

CVE-2025-55182 React Server Components Remote Code Execution Exploit Tool

xib3rr4dar/wannarace

WebApp intentionally made vulnerable to Race Condition for practicing Race Condition

entr0pie/cve-2022-44268

PoC of Imagemagick's Arbitrary File Read

koadt/poc-cve-2025-29927

This repository contains a proof of concept (POC) and an exploit script for CVE-2025-29927, a critical vulnerability in Next.js that allows attackers…

nxploited/cve-2025-2266

Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update

adityabhatt3010/react2shell-cve-2025-55182-the-deserialization-bug-that-broke-the-web

React2Shell, CVE-2025-55182, RCE Vulnerability: A critical breakdown of the unsafe deserialization flaw in React Server Components that enables…

muhammadwaseem29/sql-injection-and-rce_cve-2025-57819

FreePBX versions 15, 16, and 17 contain a Remote Code Execution (RCE) vulnerability caused by insufficient sanitization of user-supplied data in…

0xgh057r3c0n/cve-2025-6934

CVE-2025-6934 is a critical vulnerability in the WordPress Opal Estate Pro plugin (<= 1.7.5) that allows unauthenticated attackers to create new…

flojboj/cve-2022-0944

SQLPad - Template injection (POC exploit for SQLPad RCE [CVE-2022-0944])

davidaroca27/cve-2024-23346-exploit

This is a exploit for the known Remote Code Execution (RCE) vulnerability in the `pymatgen` (CVE-2024-23346) Python library by uploading a malicious…

str1keboo/cve-2025-49132

This repository contains a Proof of Concept (PoC) for CVE-2025-49132, a critical vulnerability in Pterodactyl Panel versions < 1.11.11.

elf1337/blind-xxe-controller-cve-2021-29447

Arbitrary file read controller based on CVE-2021-29447