CVE-2025-2304-exploit
jeanback1/cve-2025-2304-exploitPython exploit script for CVE-2025-2304, a mass assignment privilege escalation in Camaleon CMS. Automates CSRF token parsing and role parameter…
educationexploitationlabs-practice+5
jeanback1/cve-2025-2304-exploitPython exploit script for CVE-2025-2304, a mass assignment privilege escalation in Camaleon CMS. Automates CSRF token parsing and role parameter…
liamromanis101/cve-2025-55182Python exploit for CVE-2025-55182, a server-side JavaScript injection in Next.js/React enabling remote code execution via malformed multipart form…
jithinodattu/cve-2007-4559-labSelf-contained Docker lab demonstrating CVE-2007-4559 (TarSlip) directory traversal via Python's tarfile module. Includes vulnerable and fixed APIs,…
adilkurtulmus/linux-copy-fail-cve-2026-31431Proof-of-concept exploit for CVE-2026-31431 (Copy-Fail), a Linux kernel AF_ALG and splice() flaw enabling page cache poisoning and local privilege…
abraxas/cve-2026-79752CVE-2026-79752 disclosure pack for CakePHP 5.2.13 SQL injection via FunctionsBuilder::cast, with a Python PoC script and Docker lab for authorized…
ac8999/cve-2009-3999-hp-power-manager-4.2-build-7-buffer-overflowAutomatic script written in python for CVE-2009-3999
amulyakaushik/cve-2023-27163-labDocker-based lab reproducing CVE-2023-27163 SSRF in Request-Baskets, with exploitation verification, detection script, and network-isolation…
dhiaelhak-rached/cve-2026-39987-lab-or-marimo-cve-labEducational Docker lab demonstrating CVE-2026-39987, a pre-auth RCE via WebSocket authentication bypass in marimo, with exploit script and patch…
trax69/cve-2025-55182-pocProof of Concept for CVE-2025-55182 ("React2Shell"). A fully dockerized environment demonstrating Remote Code Execution (RCE) via insecure…
eunho87/cve-2021-42013Proof-of-concept exploit for CVE-2021-42013 Apache HTTP Server path traversal and remote code execution vulnerability, with Docker-based lab…
d1se0/cve-2024-23897-vulnerabilidad-jenkinsPython exploit script for CVE-2024-23897 (Jenkins RCE) with an automated Docker-based vulnerable lab for controlled security testing and education.
bananoname/cve-2021-42013Python script to detect and exploit path traversal and remote code execution in Apache 2.4.50 (CVE-2021-42013), with bulk scanning and a Docker lab…
ritinify/cve-2025-29927-pocProof-of-concept exploit for CVE-2025-29927, a Next.js middleware authorization bypass. Includes a vulnerable target lab and Python script to verify…
deepanshu-khurana/cve-2023-43804Containerized three-tier lab reproducing CVE-2023-43804 urllib3 cookie leak via cross-origin redirects, with exploit script and patch verification.
isabbii/poc---cve-2023-26482-rce-lab-nextcloudDocker-based lab reproducing CVE-2023-26482 (Nextcloud RCE) with automated exploit script for educational vulnerability analysis and exploitation…
isabbii/poc-apache-cve-2021-41773-infrastructure-labDocker-based lab for Apache CVE-2021-41773 path traversal and RCE exploitation with Python exploit script, demonstrating vulnerability analysis and…
bl34chig0/telstra-cybersecurity-virtual-experience-A simple python script for a firewall rule that blocks incoming requests based on the Spring4Shell (CVE-2022-22965) vulnerability
spydomain/cve-2023-22809-automated-python-exploitsAutomates vulnerability check for sudo versions and privilege escalation via sudoedit if exploitable, helping users test and gain root access.