
vulnerable-next-js-poc
Proof-of-concept exploit for CVE-2025-55182 (React2Shell), a critical RCE vulnerability in React Server Components via unsafe deserialization.…

Proof-of-concept exploit for CVE-2025-55182 (React2Shell), a critical RCE vulnerability in React Server Components via unsafe deserialization.…

Exploit for CVE-2020-0022, an Android Bluetooth RCE vulnerability. Provides proof-of-concept code for testing and understanding the memory corruption…

Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or…

Exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec, allowing unprivileged users to gain root on default Ubuntu,…

Proof-of-concept exploit for CVE-2019-1388, a Windows privilege escalation vulnerability in the Windows Update Standalone Installer (wusa.exe).

is a PoC tool designed to exploit an authenticated Remote Code Execution (RCE) vulnerability in specific versions of PostgreSQL (9.3 - 11.7)

Proof-of-concept exploit for CVE-2024-4879, a Jelly template injection vulnerability in ServiceNow enabling unauthenticated remote code execution.…

Exploit for CVE-2019-11932, a WhatsApp GIF remote code execution vulnerability. Compile and run to trigger the exploit and gain a reverse shell.

Proof-of-concept exploit for CVE-2018-8284, a remote code execution vulnerability in Microsoft SharePoint. Enables authenticated attackers to execute…

Proof-of-concept exploit for CVE-2025-2005, an arbitrary file upload vulnerability in the WordPress Front-End Users Plugin (<=3.2.32). Includes…

Python3 exploit for CVE-2025-24893, a remote code execution vulnerability in XWiki Platform. Automatically detects HTTPS/HTTP, constructs a Groovy…

C-based exploit for CVE-2022-0185 targeting a Linux kernel vulnerability to achieve local privilege escalation.

Proof-of-concept exploit for CVE-2022-1329, a remote code execution vulnerability in WordPress Elementor 3.6.0-3.6.2. Includes Docker-based…

Proof-of-concept exploit for CVE-2022-26134, an unauthenticated OGNL injection vulnerability in Atlassian Confluence Server and Data Center, allowing…

Proof-of-concept exploit for CVE-2023-1454, an unauthenticated SQL injection vulnerability in JeecgBoot v3.5.0, enabling database extraction and…

Proof-of-concept exploit for CVE-2022-26134, an unauthenticated OGNL injection vulnerability in Atlassian Confluence Server and Data Center, enabling…

Metasploit module for CVE-2021-22005 VMware vCenter arbitrary file upload vulnerability with proof-of-concept and remote code execution exploit.

Python exploit for CVE-2021-3129, a remote code execution vulnerability in Laravel 8.4.2. Includes Docker environment for local testing and requires…