CVE-2026-39987
ghxstsec/cve-2026-39987Exploit for Marimo pre-auth RCE via terminal WebSocket, providing command execution, interactive PTY shell, and reverse shell capabilities for…
exploitationpenetration-testingreconnaissance+3
ghxstsec/cve-2026-39987Exploit for Marimo pre-auth RCE via terminal WebSocket, providing command execution, interactive PTY shell, and reverse shell capabilities for…
oscar-mine/cve-2026-33017-exploitExploit for CVE-2026-33017 — Unauthenticated RCE in Langflow <= 1.8.2 via exec() in flow build endpoint
imbas007/rce-cve-2026-10520-cve-2026-10523Detection artifact generator for Ivanti Sentry authentication bypass and RCE vulnerabilities (CVE-2026-10520, CVE-2026-10523). Scans single or…
lpyydxs/cve-2021-40539Exploit for CVE-2021-40539: RCE in Zoho ManageEngine ADSelfService Plus. Includes detection script, Fofa search syntax, and webshell deployment for…
verylazytech/cve-2024-23692POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692
mosaedh/cve-2022-32548-rce-pocPython-based proof-of-concept exploit for CVE-2022-32548, an unauthenticated remote code execution vulnerability in DrayTek routers via buffer…
zapstiko/cve-2025-3248CVE-2025-3248 — Langflow RCE Exploit
nulltrace0x/cve-2025-31324Proof-of-concept exploit for CVE-2025-31324, a remote code execution vulnerability in SAP NetWeaver, with Shodan dorks for target discovery and…
mrk336/cve-2025-27480CVE-2025-27480 exposes a buffer overflow in OpenSSH 8.9p1 via a malformed SSH_USERAUTH packet. Attackers can inject shellcode and gain SYSTEM-level…
lpyzds/cve-2021-40539CVE-2021-40539：ADSelfService Plus RCE漏洞
kljunowsky/cve-2023-36845Proof-of-concept exploit for CVE-2023-36845 enabling unauthenticated remote code execution on Juniper SRX firewalls and EX switches via PHP…
g4nkd/cve-2024-22120-rce-with-gopherThis exploit was created to exploit an XXE (XML External Entity). Through it, I read the backend code of the web service and found an endpoint where…
alt3kx/cve-2021-21985_pocPoC exploit and NSE scanner for CVE-2021-21985, a vCenter Server RCE vulnerability in the vSAN Health Check plugin, with manual exploitation steps…
squ4nch/cve-2015-3224CVE-2015-3224 Exploit - Rails Web Console RCE
haxrob/bpfdoor-controller-sourceSource code for a BPFDoor backdoor controller supporting TCP, UDP, ICMP, and HTTPS covert communication channels with magic packet activation,…
archi73ct/cve-2020-0609Proof-of-concept exploit for CVE-2020-0609 that crashes a Remote Desktop Gateway server by sending a crafted UDP packet to port 3391.
bencodin/cve-2026-23918-pocProof-of-concept exploit for Apache mod_http2 double-free vulnerability (CVE-2026-23918) with recon, exploit, and RCE risk assessment phases.
inspiringz/cve-2021-22205GitLab CE/EE Preauth RCE using ExifTool