Tools

luigigubello/cve-2025-64512-polyglot-poc

A Proof-of-Concept for CVE-2025-64512 using a polyglot file.

silentsignal/cve-2023-30990

CVE-2023-30990 exploits

3ndg4me/liferay-xss-7.2.1ga2-poc-report-cve-2020-7934

Authenticated Stored XSS in LifeRay 7.2.0 GA1 via MyAccountPortlet executed by Search Results

rburrito/payloadgenerator

A wrapper for MSFvenom that allows for easy generation of payloads

reactivezero/cve-2026-20251

CVE-2026-20251 — Splunk Secure Gateway jsonpickle deserialization RCE (CVSS 8.8) | ReactiveZero Security Research

vulncheck-oss/cve-2023-46604

A go-exploit for Apache ActiveMQ CVE-2023-46604

ayiezola/cve-2026-48908

Unauthenticated RCE PoC for CVE-2026-48908 SP Page Builder (Joomla) arbitrary file upload and remote code execution exploit with mass scaning…

biitts/cve-2026-58138-conductor-unauth-rce

CVE-2026-58138 — Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).

ch4120n/cve-2026-58138

CVE-2026-58138 — Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).

asylumdx/crater-cve-2023-46865-rce

Crater <=6.0.6, CVE-2023-46865 Post-Auth RCE (Superadmin)

eqstlab/cve-2026-5027

Langflow, Remote Code Execution (RCE) via Cron Job Injection through Path Traversal

eqstlab/cve-2026-33937

Handlebars.js AST Injection Remote Code Execution Vulnerability