lem0naids/cve-2025-66417-pocProof-of-concept exploit for CVE-2025-66417 demonstrating SQL injection via XML POST request to extract database information from a web application…
fallenskill1/cve-2024-33113D-LINK DIR-845L is vulnerable to information disclosure via the bsc_sms_inbox.php file.
mdanzaruddin/cve-2021-33558.Exploit code for CVE-2021-33558 targeting Boa/0.94.13 misconfigurations that expose sensitive information via backup, preview, log, and config files.
redteambrasil/cve-2020-24029Detailed disclosure of an unauthenticated password change vulnerability in ForLogic Qualiex v1 and v3, enabling remote privilege escalation and…
dogucyber/wordpress-exploit-cve-2024-1071Unauthenticated SQL injection exploit for WordPress versions 2.1.3 to 2.8.2, targeting the Ultimate Member plugin to extract sensitive database…
h3x0v3rl0rd/cve-2015-6668Exploit for CVE-2015-6668: CV filename disclosure vulnerability in the Job-Manager WordPress plugin. Demonstrates information gathering via path…
davidmckennirey/cve-2019-3403Python script to exploit CVE-2019-3403 for scraping user information from vulnerable JIRA instances via the unauthenticated user search API.
c0ff33b34n/cve-2021-38314Python exploit for CVE-2021-38314 targeting unauthenticated sensitive information disclosure in WordPress Gutenberg Template Library & Redux…
jacklosingheart/cve-2024-51132-pocProof-of-concept exploit for CVE-2024-51132, an XML External Entity (XXE) injection vulnerability in HAPI FHIR core libraries, enabling SSRF and…
snailsploit/cve-2025-11174Document Library Lite <= 1.1.6 - Missing Authorization to Sensitive Information Exposure | CVE-2025-11174
killukeren/-cve-2019-9053Python exploit script for CVE-2019-9053 targeting CMS Simple. Automates vulnerability exploitation and information gathering for penetration testing…
atreb92/cve-2024-37765Exploit script for authenticated blind SQL injection in MachForm up to v19, using time-based techniques to extract database information from the…
r3dston3/cve-2023-23752Proof-of-concept exploit for CVE-2023-23752 (Joomla 4.0.0-4.2.8) that extracts usernames and passwords via an information disclosure vulnerability.
songqb-xx/cve-2025-57529CPAS audit management information system has SQL injection vulnerability(CVE-2025-57529)
ibrahimzx/cve-2019-1653A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an…
chucrutis/cve-2024-32370An issue in HSC Cybersecurity HSC Mailinspector version 5.2.17-3 has been identified, allowing a remote attacker to obtain sensitive information via…
chucrutis/cve-2024-32369Description: SQL Injection vulnerability in HSC Cybersecurity HSC Mailinspector v.5.2.17-3 allows a remote attacker to obtain sensitive information…
d0n601/cve-2025-12585MxChat – AI Chatbot for WordPress <= 2.5.1 - Unauthenticated Information Exposure
