Tools

xkillbit/cve-2025-55182-scanner

Passive vulnerability scanner for CVE-2025-55182 and CVE-2025-66478, detecting unauthenticated RCE in React Server Components via framework…

sh4den/cve-2022-27925

A loader for zimbra 2022 rce (cve-2022-27925)

sh4den/cve-2022-36804

A loader for bitbucket 2022 rce (cve-2022-36804)

mncoppola/rpef

Abstracts and expedites the process of backdooring stock firmware images for consumer/SOHO routers

cved-sources/cve-2019-10678

Docker container providing a vulnerable environment for CVE-2019-10678, designed for security training and exploitation practice within the Cved…

cved-sources/cve-2018-3811

Docker container providing a vulnerable environment for CVE-2018-3811, designed for security testing and exploit practice within the Cved vulnerable…

cved-sources/cve-2017-1000486

Docker container providing a pre-configured vulnerable environment for CVE-2017-1000486, designed for security testing and exploit practice within…

cved-sources/cve-2019-9194

Docker container with CVE-2019-9194 for practicing vulnerability exploitation in a controlled environment. Part of the Cved vulnerable container…

cved-sources/cve-2017-7529

Docker-based reproduction of CVE-2017-7529 (Nginx integer overflow) for security testing and education. Part of the Cved vulnerable container…

cved-sources/cve-2018-15877

Docker container providing a pre-configured vulnerable environment for CVE-2018-15877, designed for security training and exploit practice within the…

joaovicdev/exploit-cve-2024-7804

Docker lab + Python exploit for CVE-2024-7804 (PyTorch torch.distributed.rpc unsafe pickle deserialization RCE, CWE-502, torch <= 2.3.1)

osungjinwoo/cve-2022-22965

Proof-of-concept exploit and testing scripts for Spring4Shell (CVE-2022-22965), a Spring Framework remote code execution vulnerability, with bash and…

yilin1203/cve-2018-20062

Exploit for CVE-2018-20062 targeting ThinkPHP 5.0.23, designed for vulnerability verification and penetration testing of web applications running the…

shoucheng3/perwendel__spark_cve-2016-9177_2-5-1

Exploit for CVE-2016-9177 targeting Spark Java web framework, demonstrating directory traversal vulnerability in version 2.5.1 for security testing…

uthrasri/frameworks_base_aosp10_r33_cve-2023-21097

Android AOSP 10 framework base repository containing the fix for CVE-2023-21097, a vulnerability in the Android framework that could lead to local…

jcarabantes/cve-2024-54820

Proof-of-concept for an unauthenticated SQL injection vulnerability in XOne Web Monitor that allows credential dumping and data extraction via…

ivansmc/cve-2025-10353-poc

Exploit for CVE-2025-10353. Unauthenticated File Upload on Melis Platform Framework that leads to RCE

ethan-repo-lab4b6/cve-2022-36537

Python exploit for CVE-2022-36537, an authentication bypass in ZK Framework affecting R1Soft Server Backup Manager, allowing retrieval of web context…