Tools

kash-123/cve-2017-0199

Python script to generate malicious RTF/PPSX files exploiting Microsoft Office RCE (CVE-2017-0199) and deliver Metasploit/meterpreter payloads for…

s3rgeym/cve-2020-9006

Exploit for CVE-2020-9006 targeting WordPress Popup-Builder plugin via SQL injection and PHP deserialization, with payload generation and Nmap…

bermalberist/cve-2022-22947

Exploit for CVE-2022-22947, a Spring Cloud Gateway remote code execution vulnerability, using Python and requests to trigger the vulnerability.

mitespsoc/cve-2022-30190-poc

Proof-of-concept exploit for CVE-2022-30190 (Follina), demonstrating remote code execution via Microsoft Support Diagnostic Tool (MSDT) URL protocol…

xmohamed0/cve-2021-42013-apacherce

Python exploit for CVE-2021-42013, a path traversal and remote code execution vulnerability in Apache HTTP Server 2.4.49 and 2.4.50.

al1ex/cve-2018-1297

EXP for CVE-2018-1297

2867a0/cve-2022-30190

Exploit artifact for CVE-2022-30190, targeting remote code execution in the Microsoft Support Diagnostic Tool (MSDT) through crafted Office documents.

maxntv/cve-2023-22894-poc

Proof-of-concept exploit for CVE-2023-22894, demonstrating the vulnerability and providing a working exploit for security testing and validation.

0xgunrunner/cve-2025-34085

Exploit for CVE-2025-34085

thirukrishnan/cve-2023-33410

Proof-of-concept demonstrating CSV injection vulnerability in Minical 1.0.0, with step-by-step reproduction steps and payload example.

yukafake/cve-2024-32002

This is the main repository for CVE 2024-32002, and requires recursive cloning because it contains the submodels necessary for execution.

bongbongco/cve-2017-5638

Proof-of-concept exploit for Apache Struts2 remote code execution vulnerability CVE-2017-5638, demonstrating exploitation via crafted Content-Type…

d3sh1n/cve-2021-21972

Python-based proof-of-concept exploit for CVE-2021-21972 targeting VMware vCenter with webshell and SSH payload delivery for Linux systems.

cyberuser-hash/cve-2018-16763

exploit for CVE-2018-16763

atiilla/cve-2026-2441_poc

Proof-of-concept exploit for CVE-2026-2441, demonstrating the vulnerability and providing a working exploit for security testing and validation.

trinadh465/jetty_9.4.31_cve-2023-26048

Repository dedicated to the analysis and exploitation of CVE-2023-26048 in Jetty 9.4.31, providing vulnerability research and proof-of-concept code…

dldygnl/cve-2019-16113

Exploit for CVE-2019-16113 targeting Bludit CMS via malicious image upload, enabling remote code execution through crafted PHP payloads.