Tools

mateustesser/cve-2023-31717

Proof-of-concept SQL injection exploit for FUXA SCADA software (<=1.1.12) via HTTP POST JSON id parameter, enabling extraction of SQLite database…

raghvendra1207/cve-2022-22978

Proof-of-concept demonstrating authorization bypass in Spring Security's RegexRequestMatcher (CVE-2022-22978) using CRLF injection, with analysis and…

projectforsix/cve-2021-45428-defacer

Python-based exploit for CVE-2021-45428, targeting a specific web application vulnerability for penetration testing and security assessment.

h3x0v3rl0rd/cve-2022-41544

Python exploit script for CVE-2022-41544 in GetSimple CMS. Automates API key leakage, CSRF token extraction, PHP shell upload, and reverse shell…

a-roshbaik/cve-2024-4577-php-rce

Exploit for CVE-2024-4577 PHP-CGI RCE on Windows, with WAF bypass and SSRF support. Provides multiple exploit variants for default, WAF, and SSRF…

yxl2001/cve-2023-38646

PoC exploit for CVE-2023-38646, a pre-authentication RCE in Metabase. Includes a reverse shell payload generator with base64 encoding fix for…

khaidtraivch/cve-2021-41773-apache-2.4.49-

Exploit scripts for CVE-2021-41773 (Apache 2.4.49) enabling path traversal and remote code execution via CGI, including a reverse shell payload.

0x0d3ad/cve-2023-41425

Automated Python exploit for CVE-2023-41425, chaining stored XSS to remote code execution in Wonder CMS 3.2.0 through 3.4.2. Enables authenticated…

ticofookfook/poc-nextjs-cve-2025-29927

Automated PoC scanner for CVE-2025-29927 Next.js middleware bypass vulnerability. Tests multiple x-middleware-subrequest payloads across target URLs…

aymankhder/msdt_cve-2022-30190-follina-

Proof-of-concept exploit for CVE-2022-30190 (Follina) targeting Microsoft Support Diagnostic Tool, demonstrating remote code execution via malicious…

nvchungkma/cve-2021-40444-microsoft-office-word-remote-code-execution-

Proof-of-concept exploit for CVE-2021-40444, a Microsoft Office Word remote code execution vulnerability using malicious ActiveX controls in HTML…

dgoorden/cve-2023-45878

Python exploit for CVE-2023-45878 targeting Gibbon LMS 25.0.1. Uses arbitrary file write to upload a PHP web shell and execute a PowerShell reverse…

notherealhazard/follina-cve-2022-30190

Exploit for CVE-2022-30190 (Follina) targeting Microsoft Support Diagnostic Tool (MSDT) remote code execution vulnerability in Office documents.

cdedmondson/modified-cve-2019-15107

Modified exploit for CVE-2019-15107 with a Perl reverse shell payload. Designed for penetration testing of the targeted web application vulnerability.

randomrobbiebf/cve-2024-50510

AR For Woocommerce <= 6.2 - Unauthenticated Arbitrary File Upload

randomrobbiebf/cve-2024-54262

Import Export For WooCommerce <= 1.5 - Authenticated (Subscriber+) Arbitrary File Upload

likekabin/cve-2017-11882

Python-based exploit generator for CVE-2017-11882 (Microsoft Office Equation Editor remote code execution) with support for custom shellcode and…