Tools

sourcecode347/cve-2026-9082-mass_scanner

Mass Scanner For Drupal Exploit CVE-2026-9082

xxconi/cve-2025-6254

Python exploit for CVE-2025-6254 targeting unauthenticated privilege escalation in Doctreat Core <= 1.6.8. Supports single URL and multi-target…

leehunkoo/cve-2013-4660_poc

Proof-of-concept exploit for CVE-2013-4660 demonstrating YAML deserialization remote code execution in a Dockerized Node.js environment with…

afifudinmtop/mcpjam-inspector-1.4.2-remote-code-execution-cve-2026-23744

Python exploit for CVE-2026-23744 in MCPJam Inspector 1.4.2, enabling remote code execution via reverse shell on target HTTP servers.

jun2e0/cve-2025-26788

Proof-of-concept exploit for CVE-2025-26788 demonstrating WebAuthn credential ID manipulation via JavaScript hooking to bypass authentication in…

kaxm23/cve-2025-55182-auto-scanner

CVE-2025-55182 Auto Scanner - Improved Version For authorized CTF/testing purposes only

bugfor-pings/cve-2026-20127_exp

Cisco Catalyst SD-WAN 身份验证绕过漏洞(CVE-2026-20127)利用EXP

afifudinmtop/cve-2021-43857-gerapy-v0.9.7

Exploit for CVE-2021-43857 in Gerapy v0.9.7, providing a reverse shell via authenticated project creation and command injection.

dhmosfunk/cve-2025-58098

Docker-based lab demonstrating CVE-2025-58098 argument injection vulnerability with source, vulnerable, and patched code comparisons for security…

ddestinys/cve-2023-42793

Batch vulnerability scanner for CVE-2023-42793 targeting JetBrains TeamCity servers. Automates credential extraction and login URL discovery across…

archerkong/cve-2025-55182

CVE-2025-55182 poc

bambooqj/cve-2025-3248

Langflow 在对用户提交的“验证代码”做 AST 解析和编译时，在未做鉴权与沙箱限制的情况下调用了 Python 的 compile()/exec()（以及在编译阶段会评估函数默认参数与装饰器），攻击者可把恶意载荷放在参数默认值或装饰器里，借此在服务器上下文中执行任意语句（反弹…

mawk0235/cve-2024-23346

This is an exploit for CVE-2024-23346 that acts as a "terminal" (tested on chemistry.htb)

nulltrace0x/cve-2025-31324

Proof-of-concept exploit for CVE-2025-31324, a remote code execution vulnerability in SAP NetWeaver, with Shodan dorks for target discovery and…

supraaa-1337/cve-2025-31161_exploit

CVE-2025-31161 python exploit

moften/cve-2025-31324-nuclei

Nuclei template for cve-2025-31324 (SAP)

isee857/cve-2025-30208-poc

Multi-threaded Python scanner for CVE-2025-30208 Vite path traversal vulnerability with custom payload support, batch scanning, and proxy debugging.

sornphut/cve-2023-7028-gitlab

Exploit script for CVE-2023-7028 in GitLab, allowing password reset without authentication by sending crafted requests to the target server.