cve-2025-66723
audiopump/cve-2025-66723CVE-2025-66723: inMusic Brands Engine DJ >=3.0.0 through <4.3.4 exposes local and network files to external parties
data-exfiltrationexploitationinformation-gathering+3
audiopump/cve-2025-66723CVE-2025-66723: inMusic Brands Engine DJ >=3.0.0 through <4.3.4 exposes local and network files to external parties
dicanio/cve-2021-44228-docker-exampleDocker-based demonstration of CVE-2021-44228 (Log4Shell) exploitation, featuring a vulnerable Java server, malicious LDAP server, and data…
smarttfoxx/cve-2025-65321Language Sloth Sloth Bot 1.0 is vulnerable to Directory Traversal in the gif() and png() functions. The functions build file paths using unsanitized…
george0papasotiriou/cve-2026-21015-php-filter-chain-arbitrary-file-readPoC exploit for CVE-2026-21015 that abuses PHP filter chains to read arbitrary files through a vulnerable include() call, disclosing source and…
daemoncibsec/flar3adPOC of CVE-2026-51031 for arbitrary local file read
ioncodes/cve-2020-16938Bypassing NTFS permissions to read any files as unprivileged user.
p0dalirius/cve-2021-31800-impacket-smb-server-arbitrary-file-read-writeA path traversal in smbserver.py allows an attacker to read/write arbitrary files on the server.
0xterror/cve-2023-22047-oracle-peoplesoft-lfiCVE-2023-22047 is a critical unauthenticated Local File Inclusion (LFI) vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit…
george0papasotiriou/cve-2026-11111-toctou-in-file-permission-check-before-openEducational CVE PoC for a TOCTOU file-permission race in Flask; uses symlink replacement during the check-open window to disclose sensitive files.
hannob/cve-2020-27603-bbb-libreoffice-pocProof of Concept of Libreoffice file exfiltration vulnerability in Big Blue Button
mbadanoiu/mal-014MAL-014: Authenticated Arbitrary File Read in VMware vCenter Server
alpernae/cve-2024-40422Python implementation/PoC for CVE-2024-40422. Exploits a critical directory traversal vulnerability in Devika v1's /api/get-browser-snapshot endpoint…
jfriedli/cve-2025-12137Proof-of-concept exploit for CVE-2025-12137 demonstrating local file disclosure via a WordPress plugin's REST API importer endpoint. Includes…
thestingr/cve-2024-36991-toolThis binary POC automates the exploitation of CVE-2024-36991 by sending crafted curl requests to a vulnerable Splunk instance. It retrieves sensitive…
ettic-team/dnsbinDNS-based data exfiltration testing tool with bidirectional transfer, web UI, and client script for detecting blind RCE/XXE vulnerabilities in…
graysignal/cve-2024-23897-jenkins-arbitrary-read-file-vulnerabilityUnauthenticated Jenkins CLI exploit scanner for CVE-2024-23897 that detects vulnerable versions and reads arbitrary files from the controller through…
abdulazizalsewedy/cve-2021-29447Step-by-step demonstration of CVE-2021-29447, a WordPress Media Library XXE vulnerability leaking sensitive files via crafted WAVE uploads, including…
nxploited/cve-2024-12849-pocExploit for CVE-2024-12849, an arbitrary file read vulnerability in WordPress Error Log Viewer plugin. Downloads sensitive files via unauthenticated…