Tools

gteissier/cve-2017-10617

Proof-of-concept exploit for Juniper Contrail XXE vulnerability (CVE-2017-10617) with Docker-based lab environment demonstrating local file…

oscerd/cve-2026-60093

Proof-of-concept reproducers for Apache Camel path traversal vulnerability (CVE-2026-60093) in camel-azure-storage-datalake, demonstrating arbitrary…

oscerd/cve-2026-66906

Proof-of-concept reproducers for Apache Camel path traversal vulnerability (CVE-2026-66906) in camel-azure-storage-blob, demonstrating arbitrary file…

superman-l/cve-2026-16723

Reproduces fastjson 1.2.83 @JSONType RCE with a vulnerable Spring Boot target and ASM-based payload generator using HTTP or file protocol jar chains.

dungsocool/cve-2023-6553

Proof-of-concept exploit and technical write-up for CVE-2023-6553, an unauthenticated PHP file inclusion vulnerability enabling remote code execution…

jbovet/cve-2021-41773

Proof-of-concept exploit for Apache HTTP Server 2.4.49 path traversal vulnerability (CVE-2021-41773) with Docker setup and multiple exploitation…

s-amnajafri/cve-2021-41773-apache-lab

Docker-based lab for reproducing CVE-2021-41773 (Apache HTTP Server 2.4.49) through controlled path traversal and file disclosure using a custom…

nathanhimself/cve-2026-38526-poc

CVE-2026-38526 | Krayin CRM v2.2.x Authenticated RCE - Unrestricted PHP File Upload via TinyMCE

yucaerin/cve-2025-4403

Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function

sec-it/exploit-cve-2019-14530

OpenEMR < 5.0.2 - (Authenticated) Path Traversal - Local File Disclosure

realistic-security/cve-2017-16524

Unrestricted file upload vulnerability - Web Viewer 1.0.0.193 on Samsung SRN-1670D

showmeyourhands/cve-2026-52102-poc

Proof-of-concept exploit targeting CVE-2026-52102 in web services, accepting multiple target URLs from a file for authorized security testing and…

dnr6419/cve-2021-24145

WordPress File Upload Vulnerability, Modern Events Calendar Lite WordPress plugin before 5.16.5

7mitu/cve-2020-25790

Dockerized Typesetter CMS environment reproducing CVE-2020-25790 file upload vulnerability, with default admin credentials and a walkthrough for…

dr-d25/cve-2026-49049

Technical analysis and Proof of Concept (PoC) for CVE-2026-49049, an unauthenticated arbitrary file write vulnerability in JoomShaper Helix3 for…

yeonchoda/cve-2024-9264

PoC exploit for CVE-2024-9264: Grafana SQL Expression vulnerability enabling local file inclusion and remote code execution via DuckDB SQL injection.…

syntaxsaiyan/cve-2026-36851

Walkthrough and PoC of File path traversal vulnerability(CVE-2026-36851) for UnPoller 2.33.0