Tools

george0papasotiriou/cve-2026-5050-blind-ldap-injection-via-unescaped-filter

Reproduces CVE-2026-5050 with a simulated Flask LDAP server and exploit script, demonstrating blind LDAP injection via unescaped filters to bypass…

ex-cal1bur/cve-2026-42568

An LDAP injection vulnerability exists in org.yamcs.security.LdapAuthModule. The username parameter is inserted directly into LDAP search filters…

mbanyamer/cve-2026-26988-librenms-sqli

Proof-of-concept exploit for unauthenticated SQL injection in LibreNMS ajax_table.php, demonstrating time-based and boolean-based blind injection…

eliasdekiniweek/cve-2022-22980

Exploitation de CVE-2022-22980

revshellxd/lfi-destruction

This program Prompts you for the Local File Inclusion information and will automatically search the /etc/passwd and using the users names found will…

yup-ivan/cve-2024-9796

POC (SQLi) -> CVE-2024-9796

trex96/vulnerable-bsr-lab-cve-2023-6933

Hands-on lab for CVE-2023-6933, a PHP Object Injection vulnerability in Better Search Replace WordPress plugin, with Docker deployment, nuclei…

ocmenog/cve-2025-55998

Documented reflected XSS vulnerability (CVE-2025-55998) in Mezereon's Smart Search and Filter app for Shopify and BigCommerce, with proof-of-concept…

nxploited/cve-2025-39538

WordPress WP-Advanced-Search <= 3.3.9.3 - Arbitrary File Upload Vulnerability

akhlak2511/cve-2024-50969

Proof-of-concept for a reflected XSS vulnerability in Code-projects Jonnys Liquor 1.0, demonstrating script injection via the search parameter in…

j3r1ch0123/cve-2024-40422

Found this on exploit-db, decided to make my own for practice. This exploit will search out the passwd file and print the contents on a vulnerable…

ak1t4/cve-2024-3400

Global Protec Palo Alto File Write Exploit

w2xim3/cve-2023-6933

Introduction to CVE-2023-6933 Vulnerability

andrea-mattioli/apache-exploit-cve-2021-42013

Exploit with integrated shodan search

t0kx/exploit-cve-2015-1427

Elasticsearch 1.4.0 < 1.4.2 Remote Code Execution exploit and vulnerable container