CVE-2002-0347
alt3kx/cve-2002-0347Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root,…
exploitationinformation-gatheringreconnaissance+2
alt3kx/cve-2002-0347Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root,…
vuongnv3389-sec/cve-2019-20372Proof-of-concept exploit for CVE-2019-20372: HTTP request smuggling via nginx error_page directive, enabling access to hidden resources.
jrrombaldo/cve-2017-5638Multithreaded vulnerability validator for Apache Struts 2 (CVE-2017-5638) that scans thousands of endpoints via HTTP header injection to detect…
yang-shun-yu/cve-2023-38545Proof-of-concept exploit for CVE-2023-38545, a curl heap buffer overflow. Includes SOCKS5 proxy and HTTP server to trigger the vulnerability and…
fa1c0n35/cve-2021-41773Exploit for Apache HTTP Server 2.4.49 path traversal and remote code execution vulnerability (CVE-2021-41773), enabling LFI and RCE on vulnerable…
ethanol1310/poc-cve-2025-29927-Proof-of-concept exploit for CVE-2025-29927, demonstrating a middleware authentication bypass in self-hosted Next.js applications via crafted HTTP…
jet-pentest/cve-2024-25175Proof-of-concept exploit for CVE-2024-25175: reflected XSS via HTTP response splitting in Kickidler Server before 1.107.0, with CVSS 6.1 and…
vuongnv3389-sec/cve-2021-41773Dockerized proof-of-concept for Apache HTTP Server path traversal and RCE (CVE-2021-41773), including build instructions and curl-based exploitation…
rnsss/cve-2021-42013Exploit for Apache HTTP Server path traversal and file disclosure vulnerability CVE-2021-42013, enabling unauthorized access to files on vulnerable…
sujaygr8/cve-2020-3187Proof-of-concept exploit for CVE-2020-3187 targeting Cisco ASA/FTD session password disclosure via crafted HTTP cookie header.
metapox/cve-2020-25613Proof-of-concept exploit for HTTP request smuggling vulnerability CVE-2020-25613, demonstrating chunked transfer encoding parsing bypass to poison…
kov404/cve-2024-51358Proof-of-concept exploit for CVE-2024-51358, a server-side request forgery (SSRF) vulnerability in Heimdall 2.6.1, enabling remote HTTP requests to…
jjso12/apache-pluto-3.0.0--cve-2018-1306Python exploit script for CVE-2018-1306 in Apache Pluto 3.0.0, enabling malicious file upload via HTTP method tampering to achieve remote code…
batmoshka55/cve-2018-9995_dvr_credentialsExploit tool for CVE-2018-9995 that retrieves DVR credentials via crafted HTTP request, targeting multiple DVR vendors for security testing.
mohwahyudi/cve-2021-41773Python script that uses Shodan to discover Apache HTTP Server 2.4.49 instances vulnerable to CVE-2021-41773 path traversal and file disclosure.
aleksey-vi/cve-2024-40324Proof-of-concept for CRLF injection in E-Staff v5.1, demonstrating HTTP response splitting and header manipulation for security testing.
barcrange/cve-2025-0108-authentication-bypass-checkerPython script that tests PAN-OS devices for CVE-2025-0108 authentication bypass by sending crafted HTTP requests and analyzing responses.
knotsecurity/cve-2025-29927-nextjs-middleware-simulationSimulates CVE-2025-29927, a critical Next.js vulnerability allowing attackers to bypass middleware authorization by exploiting the internal…