Tools

pei4an/cve-2025-28915

Exploit for CVE-2025-28915: WordPress ThemeEgg ToolKit arbitrary file upload vulnerability allowing remote Web Shell deployment. Includes…

nxploited/cve-2024-54262

Exploit CVE-2024-54262: Arbitrary File Upload in Import Export for WooCommerce

meicookies/cve-2020-24186

WpDiscuz 7.0.4 Arbitrary File Upload Exploit

any3ite/cve-2020-5902-f5big

Go-based scanner and exploit for CVE-2020-5902, targeting F5 BIG-IP devices. Supports command execution and file reading via HTTP requests, enabling…

guillermogm4/cve-2024-1302---badgermeter-moni-tool-sensitive-information-exposure

Proof-of-concept exploit for CVE-2024-1302 demonstrating unauthenticated log file download in Badgermeter moni:tool, exposing sensitive information…

pumpkinpiteam/cve-2022-24716

Python exploit for CVE-2022-24716: arbitrary file disclosure in Icinga Web 2 versions <2.8.6, <2.9.6, <2.10. Usage: python3 exploit.py -u <url> -f…

jcppeiqi/-cve-2021-46381

Python exploit for CVE-2021-46381 targeting D-Link DAP-1620 arbitrary file read vulnerability with FOFA-based device discovery.

manojcode/easy-file-share-7.2-exploit-cve-2018-9059

My version - Easy File Sharing Web Server 7.2 - 'UserID' - Win 7 'DEP' bypass

am6539/cve-2019-3396

Exploit for CVE-2019-3396, a path traversal and RCE vulnerability in Confluence Server, enabling unauthorized file read and remote code execution.

shellunease/cve-2024-34833-payroll-management-system-rce

Unauthenticated remote code execution exploit for Payroll Management System v1.0 via malicious file upload, with filename prediction and reverse…

charlesgargasson/cve-2023-1177

Proof-of-concept exploit for MLflow path traversal (CVE-2023-1177) allowing unauthorized file read via crafted API requests.

redteam-rediron/cve-2020-1938

Proof-of-concept exploit for CVE-2020-1938 (Ghostcat) targeting Apache Tomcat AJP connector, allowing file read and potential RCE. Includes Docker…

nxploited/cve-2024-9935

Python exploit for CVE-2024-9935 targeting unauthenticated arbitrary file download in PDF Generator Addon for Elementor Page Builder (<=1.7.5).

lowkey0808/cve-2020-25540

Python exploit for ThinkAdmin CVE-2020-25540, enabling unauthorized directory traversal and arbitrary file read via a single URL argument.

mileticluka1/eval-stdin

Automated Exploit for CVE-2017-9841 (eval-stdin.php vulnerable file)

randomrobbiebf/cve-2024-10629

GPX Viewer <= 2.2.8 - Authenticated (Subscriber+) Arbitrary File Creation

randomrobbiebf/cve-2025-25163

Plugin A/B Image Optimizer <= 3.3 - Authenticated (Subscriber+) Arbitrary File Download

vagebondcur/image-magick-cve-2022-44268

Exploit for ImageMagick CVE-2022-44268, demonstrating arbitrary file read via crafted image. Includes PoC and analysis for security testing.