PoC
mcw0/pocIssues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.
binary-exploitationembedded-systems-securityexploitation+5
mcw0/pocIssues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.
hackerhouse-opensource/exploitsexploits and proof-of-concept vulnerability demonstration files from the team at Hacker House
tothi/pwn-hisilicon-dvrProof-of-concept exploit and vulnerability disclosure for HiSilicon hi3520d DVR/NVR devices. Demonstrates RCE via web interface, backdoor…
momalab/icsfuzzInstrumented fuzzer for PLC-based ICS control applications, targeting Codesys runtime on Wago controllers to uncover memory corruption and…
otsmane-ahmed/cve-2025-2620-pocProof-of-concept exploit for CVE-2025-2620, a critical stack-based buffer overflow in D-Link DAP-1620 routers enabling unauthenticated remote code…
zzz66686/cve-2017-14262Exploit for CVE-2017-14262 targeting Samsung NVR devices: extracts admin MD5 password hash via unauthenticated CGI request and logs in with the hash…
seifallahhomrani1/cve-2023-0861-pocAnalyzing and Reproducing the Command Injection Vulnerability (CVE-2023-0861) in NetModule Routers
luel-4013/misfortune-cookieInteractive PoC suite for CVE-2014-9222 (Misfortune Cookie) and related router exploits, featuring detection, auth bypass, DoS, and RCE modules with…
whoami-012/cve-2026-96515Technical report and authenticated reverse-shell PoC for CVE-2026-96515, a root command execution flaw in the Netlink HG323RW router's BOA diagnostic…
d6fault/cve-2026-95675Python PoC exploiting CVE-2026-95675, an unauthenticated root command injection in D-Link DAP-1360 RevB firmware via a hardcoded auth-bypass and the…
cyberaz0r/gl.inet-multiple-vulnerabilitiesExploits for GL.iNet CVE-2023-46454, CVE-2023-46455 and CVE-2023-46456
4d000/tenda-f3-v4Python script to exploit CVE-2020-35391 on Tenda F3 V3/V4 routers, enabling unauthorized download of configuration, flash, and syslog files.
l41kaa/cve-2024-48705Wavlink AC1200 with firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 are vulnerable to a post-authentication command injection while…
kernel364/cve-2024-29973Proof-of-concept exploit for command injection vulnerability in Zyxel NAS devices. Demonstrates arbitrary command execution via crafted HTTP…
remenis/cve-2025-63667Vatilon-based IP camera firmwares issue Session-Id tokens without verifying credentials, allowing attackers to obtain sessions and retrieve plaintext…
tyeyeah/dir-890l-1.20-rceAnalysis and PoC for D-Link DIR-890L RCE (CVE-2022-29778)
wiliam227user/cve-2018-12633-tplink-auth-bypassA technical case study and exploitation analysis of the Authentication Bypass vulnerability in TP-Link TL-WR840N firmware (CVE-2018-12633).