CVE-2024-4367
0xr2r/cve-2024-4367Proof-of-concept for CVE-2024-4367 that generates a malicious PDF to exploit arbitrary JavaScript execution in PDF.js.
exploitationpayload-generationpenetration-testing+2
0xr2r/cve-2024-4367Proof-of-concept for CVE-2024-4367 that generates a malicious PDF to exploit arbitrary JavaScript execution in PDF.js.
donmedfor/cve-2015-3306Python PoC exploit for CVE-2015-3306 ProFTPD directory traversal. Copies files and drops a PHP backdoor into webroot for remote command execution via…
cdedmondson/modified-cve-2015-3306-exploitPython exploit for CVE-2015-3306 targeting ProFTPD servers. Automates PHP reverse shell upload via FTP to achieve remote code execution on vulnerable…
birdsareflyingcameras/cve-2025-53770_raw-http-request-generatorScript to generate raw HTTP requests for exploiting CVE-2025-53770, enabling targeted vulnerability testing and proof-of-concept execution.
subc0ol/microsoft-word-cve-2017-0199-Exploit for Microsoft Word CVE-2017-0199 enabling remote code execution via crafted HTA handler files, allowing arbitrary command execution on…
ianxtianxt/cve-2019-11043Remote code execution exploit for CVE-2019-11043 targeting Nginx with php-fpm. Includes Go and pre-compiled exploit binaries for testing vulnerable…
redpack-kr/cve-2025-26319Exploit for CVE-2025-26319 targeting Flowise's /api/v1/attachments endpoint, enabling unauthenticated arbitrary file upload and webshell generation…
l0n3rs/cve-2017-8759Exploit script for CVE-2017-8759 targeting a remote code execution vulnerability in Microsoft Office via crafted SOAP WSDL files.
lisinan988/cve-2018-8174-expPython-based exploit for CVE-2018-8174 targeting Internet Explorer via crafted RTF file, enabling remote code execution with netcat reverse shell…
pevinkumar10/cve-2025-47812Exploit for CVE-2025-47812 with custom psudo shell and robust error handling.
prabhatverma47/cve-2025-58180In OctoPrint version <=1.11.2, an attacker with file upload access (e.g., valid API key or session) can craft a malicious filename that bypasses…
jakabakos/cve-2024-4577-php-cgi-argument-injection-rcePython exploit for CVE-2024-4577 PHP CGI argument injection enabling unauthenticated remote code execution on Windows servers with specific locales.
styx00/dnn_cve-2015-2794NSE plugin for Nmap that scans a DotNetNuke (DNN) web application for an Administration Authentication Bypass vulnerability (CVE-2015-2794, EDB-ID:…
controlo8/cve-2024-32002-hookhook repo for cve-2024-32002
wanlichangchengwanlichang/cve-2024-4577-rce-expBatch RCE exploit for CVE-2024-4577 targeting PHP CGI on Windows, with configurable command, file read, and thread settings.
blackhatexploitation/buk_ts_killerExploit for BUK-TS authentication bypass and remote code execution, with steps to intercept responses and manipulate userid to gain unauthorized…
flying0er/cve-2022-22947-gobyGoby POC for CVE-2022-22947 (Spring Cloud Gateway RCE). Provides a ready-to-use exploit template for penetration testing and vulnerability…
m4sk0ff/cve-2018-11776PoC Script for the CVE-2018-11776 vuln