Tools

adrianmafandy/cve-2021-41773

Proof-of-concept exploit for CVE-2021-41773, a path traversal and remote code execution vulnerability in Apache HTTP Server 2.4.49. Automates…

whisperer1290/cve-2025-54309__enhanced_exploit

Multi-threaded exploit for CrushFTP authentication bypass (CVE-2025-54309) with race condition implementation, XML payload generation, and admin user…

segfault-it/cve-2025-25257

A working (at least for me :] ) exploit for CVE-2025-25257

l3ster1337/poc-cve-2024-21542

Proof-of-concept exploit for CVE-2024-21542 demonstrating arbitrary file write via Zip Slip in Luigi pipeline manager. Generates malicious archives…

thecybergeek/cve-2019-19369

Authenticated remote code execution exploit for FusionPBX versions <= 4.5.10, leveraging the PHP-Editor function to inject a payload and gain a shell…

g01d3nw01f/cve-2021-21315

rust noob tried write easy exploit code with rust lang

g01d3nw01f/cve-2015-8351

this script is exploit for wordpress old plugin gwolle

mbanyamer/-cve-2026-26215-manga-image-translator-rce

Proof-of-concept exploit for CVE-2026-26215, an unauthenticated remote code execution vulnerability in manga-image-translator via unsafe pickle…

mbanyamer/cve-2021-41579-lcds-laquis-scada-4.3.1.1085-arbitrary-file-write

Proof-of-concept exploit for CVE-2021-41579 enabling arbitrary file write/read and RCE via malicious .els project file in LAquis SCADA ≤4.3.1.1085.

rajaabdullahnasir/cve-2018-7600-remote-code-execution

This repository contains a completely original and self-developed Proof-of-Concept (PoC) for CVE-2018-7600, also known as Drupalgeddon 2 — a critical…

0xsamy/cve-2022-26134

Proof-of-concept exploit for CVE-2022-26134, an unauthenticated OGNL injection vulnerability in Atlassian Confluence Server and Data Center, enabling…

open-flaw/cve-2026-25940

Proof-of-concept for CVE-2026-25940 demonstrating embedded JavaScript execution via crafted AcroForm radio button appearances in PDF viewers, with…

mr-alperen/cve-2022-26810

Remote code execution exploit for CVE-2022-26809 targeting Windows RPC heap buffer overflow with msfvenom shellcode integration and meterpreter…

rahul-securify/react2shell-cve-2025-55182

Proof-of-concept exploit for CVE-2025-55182 demonstrating remote code execution in Next.js via prototype pollution. Includes a pre-configured…

useru1k/php-8.1.0-dev-exploit

Exploit for the PHP 8.1.0-dev backdoor vulnerability (CVE-2021-21707)

sn0wbaall/cve-2023-4220-poc

Automated proof-of-concept exploit for CVE-2023-4220 in Chamilo LMS, enabling arbitrary file upload and remote code execution via unauthenticated…

techcorp/cve-2025-8088-exploit

A proof-of-concept exploit for WinRAR vulnerability (CVE-2025-8088) affecting versions 7.12 and lower. This tool creates a malicious RAR archive that…