nexxp90/cve-2025-55182_rce_exploitPython-based RCE detection tool that sends crafted POST requests, analyzes responses for execution indicators, and supports batch scanning with…
spiralbl0ck/cve-2020-24972Proof-of-concept demonstrating DLL execution via Qt platformpluginpath option in Kleopatra, exploiting CVE-2020-24972 through custom URI schemes.
linjacck/cve-2022-29464CVE-2022-29464 exploit tool with detection and arbitrary file upload capabilities, supporting single URL and batch scanning with custom webshell…
ysfcndgr/react2shell-cve-2025-55182-advanced-scannerAutomated scanner for CVE-2025-55182 RCE in Next.js with 8 WAF bypass techniques, custom command execution, and test-only detection mode for…
abrewer251/cve-2020-1938_ghostcat-pocApache Tomcat AJP Ghostcat (CVE-2020-1938) exploit tool for file disclosure with multi-target scanning, custom wordlists, and upload point detection…
mexeck88/csrf-via-stored-xss-for-privescProof-of-concept exploit for CVE-2025-26153: stored XSS in Chamilo LMS forum threads enabling privilege escalation from regular user to admin via…
materaj2/exploit_cve_2025_67303Proof-of-concept exploit for CVE-2025-67303 targeting remote code execution in ComfyUI Manager via malicious custom node installation. Includes…
tzwlhack/cve-2017-11882Python-based exploit generator for CVE-2017-11882 (Microsoft Office Equation Editor vulnerability) with support for custom shellcode, mshta payloads,…
qw3rtyou/cve-2021-44228_dockernizeDockerized lab environment for safely practicing CVE-2021-44228 (Log4Shell) exploitation. Includes attacker LDAP server and vulnerable Java…
harutomo-jp/cve-2024-28397-rcePython exploit script for CVE-2024-28397 targeting js2py <= v0.74. Supports reverse shell and custom command execution via HTTP endpoint.
syedghufranraza/cve-2018-7600-remote-code-executionPython-based proof-of-concept exploit for CVE-2018-7600 (Drupalgeddon2) enabling remote code execution on vulnerable Drupal sites, with multi-target…
pevinkumar10/cve-2025-47812Python exploit for CVE-2025-47812 targeting WingFTP Server, enabling unauthenticated remote code execution via NULL byte injection in username field,…
syndicate27/text4shell-exploitA custom Python-based proof-of-concept (PoC) exploit targeting Text4Shell (CVE-2022-42889), a critical remote code execution vulnerability in Apache…
f01965/cve-2018-5146Proof-of-concept exploit and custom payload generator for CVE-2018-5146, including crafted OGG POC file and HTML-based exploit with CRC32 calculation…
drew-alleman/cve-2018-19422Subrion File Upload Bypass to RCE and Custom File Upload (Authenticated) POC
lonecloud/cve-2021-44228-apache-log4jProof-of-concept exploit for CVE-2021-44228 (Log4Shell) demonstrating remote code execution via JNDI injection with LDAP server and custom payload…
randomrobbiebf/cve-2024-12594ALL In One Custom Login Page <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+)Privilege Escalation
yzee00/cve-2017-12617Python3 exploit for CVE-2017-12617 (Apache Tomcat JSP upload RCE) with single URL and batch scanning modes, supporting custom payload deployment.
