Tools

aristois913/cve-2025-31324

Proof-of-Concept 0day for SAP NetWeaver created by ShinyHunters

b0fh/cve-2018-4878

Metasploit module for CVE-2018-4878

0xc4t/cve-2024-28995

Exploit for CVE-2024-28995

sijiahi/wordpress_cve-2019-9787_defense

This is a recurrence of cve-2019-9787 on Wordpress and a hash-based defense.

baikuya/cve-2022-44268-poc

CVE-2022-44268 PoC

lucasvanhaaren/cve-2023-47400

Proof of Concept for the CVE-2023-47400

cduram/notcve-2026-0009

Path Traversal Vulnerability in NitroShare v0.3.4

nullcult/cve-2025-31324-file-upload

A totally unauthenticated file-upload endpoint in Visual Composer lets anyone drop arbitrary files (e.g., a JSP web-shell) onto the server.

kai-one001/wordpress-news-and-blog-designer-bundle-cve-2025-14502

WordPress的News and Blog Designer Bundle插件在1.1及之前所有版本中，存在通过template参数导致的本地文件包含漏洞。该漏洞使得未经身份验证的攻击者能够包含并执行服务器上的任意.php文件，从而运行这些文件中的任何PHP代码。在允许上传和包含.php文件类型…

dskmehra/cve-2022-0848

Proof-of-concept exploit for CVE-2022-0848 enabling remote code execution in part-db 0.5.11 via a simple bash script.

lichaser/cve-2024-12484

CVE-poc

russellwork2021-lgtm/cosmicsting-cve-2024-34102-exploit

Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability

0xmid00/cve-2022-46364-poc

CVE-2022-46364 Apache CXF XOP:Include SSRF / LFI

kikechans/-grafana-lfi-cve-2021-43798

📂 Grafana LFI Exploit (CVE-2021-43798). Extracción automatizada de credenciales y configuración. 🕵️

haisenberg/cve-2020-5902

Auto exploit RCE CVE-2020-5902

thatonesecguy/cve-2022-1388-exploit

Test and Exploit Scripts for CVE 2022-1388 (F5 Big-IP)

henry4e36/cve-2018-20463

WordPress JSmol2WP Plugin 1.07版本中存在安全漏洞。攻击者可利用该漏洞读取任意文件。