Tools

orangepirate/cve-2018-9948-9958-exp

a exp for cve-2018-9948/9958 , current shellcode called win-calc

matesz44/cve-2009-2265

posix sh poc for CVE-2009-2265 (deps: curl,msfvenom,uuidgen,tr)

svchostmm/cve-2024-25600-mass

Mass exploit for CVE-2024-25600, uploading webshells to vulnerable WordPress sites via a list of targets.

wiseep/cve-2025-48827

Vbullettin RCE - CVE-2025-48827

bkreisel/cve-2022-46169

🐍 Python Exploit for CVE-2022-46169

mr-r00t11/cve-2024-23692

Rejetto HFS (HTTP File Server) is a simple web file server that facilitates file sharing over a network or the internet.

h3x0v3rl0rd/cve-2022-41544

Python exploit script for CVE-2022-41544 in GetSimple CMS. Automates API key leakage, CSRF token extraction, PHP shell upload, and reverse shell…

0xdtc/wondercms-4.3.2-xss-to-rce-exploits-cve-2023-41425

CVE-2023-41425 Refurbish

gr4ykt/cve-2011-2523

https://www.exploit-db.com/exploits/49757

charchit-subedi/chamilo-lms-unauthenticated-rce-poc

This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220

lowkey0808/cve-2022-29464

Python exploit for CVE-2022-29464 targeting WSO2 web servers with automated webshell upload and command execution capabilities.

1342486672/flangvik

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode in…

substing/cve-2019-11447_reverse_shell_upload

Python exploit for CVE-2019-11447 that uploads a PHP reverse shell to CuteNews 2.1.2, enabling remote command execution on vulnerable web…

h4cking4all/cve-2023-4220

CVE-2023-4220 Chamilo Exploit

giovannipajeu1/cve-2024-23741

Automated exploit for CVE-2024-23741 targeting Hyper on macOS. Validates vulnerability and injects code to spawn a remote shell via RunAsNode and…

meloppeitreet/cve-2025-32433-remote-shell

Go-based exploit for CVE-2025-32433

iuds/-cve-2024-52010-

Automated exploit tool targeting CVE-2024-52010 for penetration testing and vulnerability validation.