CVE-2026-3844
sahmsec/cve-2026-3844Python proof-of-concept for CVE-2026-3844, an unauthenticated arbitrary file upload in WordPress Breeze Cache plugin, enabling remote code execution.…
exploitationpayload-developmentpenetration-testing+3
sahmsec/cve-2026-3844Python proof-of-concept for CVE-2026-3844, an unauthenticated arbitrary file upload in WordPress Breeze Cache plugin, enabling remote code execution.…
jasonbernier/cve-2025-5781Proof-of-concept exploit for CVE-2025-57819 in FreePBX: SQL injection in the AJAX API to execute arbitrary PHP, create a persistent webshell, and…
xgrxmey/malvinciThis simple but powerful script will introduce a new type of malware that will turn off the firewall, start an HTTP server, forward its port through…
m1ddl3w4r3/wsl_payload_builderA powerful shell script for creating custom WSL (Windows Subsystem for Linux) distributions with embedded payloads.
h3x0v3rl0rd/pickle_exploitDemonstrating Remote Code Execution Vulnerability via Pickle Serialization in ClearML
hvictor/shellcode-x64Shellcodes for Windows >= 11 x64
synacktiv/cve-2025-59712_cve-2025-59713Snipe-IT PoC exploit for CVE-2025-59712 and CVE-2025-59713
thewhiteh4t/cve-2026-27483MindsDB Path Traversal to RCE PoC
grahamhelton/uspEstablishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload (binary or script)
l0n3m4n/cve-2024-6387PoC - Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (Scanner and Exploit)
lincemorado97/cve-2025-55182_cve-2025-66478Proof-of-concept exploit for critical RCE (CVSS 10.0) in Next.js/React Server Components via deserialization manipulation. Includes Python script for…
m3m0o/chamilo-lms-unauthenticated-big-upload-rce-pocThis is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220
prelearn-code/cve-2024-6387Proof-of-concept exploit for CVE-2024-6387 (regreSSHion) targeting unauthenticated remote code execution in OpenSSH server via signal handler race…
xaitax/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerabilityMicrosoft-Outlook-Remote-Code-Execution-Vulnerability
fathanahhidayati/https-github.com-xaitax-cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerabilityProof-of-concept exploit for CVE-2024-21413, a Microsoft Outlook remote code execution vulnerability. Demonstrates NTLM credential leakage and RCE…
experience-rookie/struts-s2-052-deserialization-rce-labProof-of-Concept exploit for Apache Struts S2-052 (CVE-2017-9805) XML Deserialization Remote Code Execution. Created while solving the INE eWPTX…
darker-ink/react-ssr-vulnerabilityThis is a POC script for CVE-2025-55182 (React SSR RCE)
tamagorengs/react2shell-poc-cve-2025-55182Proof-of-concept exploit for CVE-2025-55182, a critical RCE vulnerability in Next.js Server Actions. Exploits insecure deserialization in the React…