george0papasotiriou/cve-2026-11112-xxe-via-svg-image-uploadDemonstrates XXE via SVG upload with a vulnerable Flask/lxml parser and an exploit script for arbitrary file read, SSRF, and denial-of-service…
jetp1ane/zena-cve-2021-45026Proof-of-concept exploit for CVE-2021-45026 targeting Rocket Software Zena. Chains stored XSS to remote code execution via REST API task injection on…
ludy-dev/vbulletin_routestring-rcePoC exploit for CVE-2019-16759 enabling remote code execution on vBulletin 5.0.0–5.6.2 via malicious POST request due to input validation flaw.
puzzlepeaches/log4junifiExploiting CVE-2021-44228 in Unifi Network Application for remote code execution and more.
malwareman007/deathnoteProof of Concept of CVE-2022-30190
dahalsamir/cve-2026-23744-mcpjam-rce-exploitThis Python proof-of-concept targets a vulnerable MCP (Model Context Protocol) service exposed by the target application. The vulnerability allows an…
husenjandev/cve-2023-27163-and-mailtrail-v0.53Requests Baskets (CVE-2023-27163) and Mailtrail v0.53
ungabunga-ctf/cve-2023-26039CVE-2023-26039 - ZoneMinder. Any authenticated user can construct an api command to execute any shell command as the web user.
projectforsix/cve-2021-45428-defacerPython-based exploit for CVE-2021-45428, targeting a specific web application vulnerability for penetration testing and security assessment.
qw3rtyou/cve-2021-44228_dockernizeDockerized lab environment for safely practicing CVE-2021-44228 (Log4Shell) exploitation. Includes attacker LDAP server and vulnerable Java…
rmccarth/cve-2021-3164Church Rota version 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to…
xmohamed0/cve-2021-21315-pocProof-of-concept exploit for CVE-2021-21315, demonstrating remote code execution in a web application framework. Intended for security testing and…
securifera/cve-2018-16156-exploitExploit for CVE-2018-16156 targeting a remote code execution vulnerability in a web application, providing a proof-of-concept payload for security…
pimps/cve-2017-1000486Primefaces <= 5.2.21, 5.3.8 or 6.0 - Remote Code Execution Exploit
nxvh1337/cve-2015-9235_jwt_key_confusionautomate CVE-2015-9235 exploitation
neowans/cve-2018-19246Proof-of-concept exploit for CVE-2018-19246 with Docker-based deployment and Pocsuite integration for automated web application vulnerability testing.
junnythemarksman/cve-2021-31630Modified proof-of-concept exploit for CVE-2021-31630 targeting a web application vulnerability with reverse shell payload generation and remote code…
isuruwa/log4jScanner and proof-of-concept exploit for Log4j RCE (CVE-2021-44228). Creates a vulnerable application and runs the exploit with a netcat listener.
