Tools

thekernelpanic/exploit-apache2-cve-2021-41773

Exploit for path transversal vulnerability in apache

soy-oreocato/cve-2023-46998

Proof-of-concept exploit for a stored/reflected Cross-Site Scripting (XSS) vulnerability in Bootbox.js versions 3.2 through 6.0, allowing remote…

afine-com/cve-2022-36433

Cross-site Scripting (XSS) in blog-post creation functionality in Amasty Blog Pro for Magento 2

charlesbickel/cve-2021-38619

Proof-of-concept for CVE-2021-38619: unauthenticated stored XSS in openBaraza HCM HR Payroll v3.1.6, with payload examples for credential theft and…

elizeuopain/poc-cve-2024-24035

Proof-of-concept exploit for DOM-based Cross-Site Scripting (XSS) vulnerability in SIL 3.1 via the 'hmessage' parameter, demonstrating the attack…

avergnaud/next.js_exploit_cve-2024-34351

Educational demo of a Server-Side Request Forgery (SSRF) vulnerability in Next.js (CVE-2024-34351), with step-by-step exploitation and mitigation…

rashidkhanpathan/cve-2022-43117

Proof-of-concept exploit for CVE-2022-43117, a stored XSS vulnerability in Sourcecodester Password Storage Application 1.0, demonstrating JavaScript…

kielvaughn/cve-2021-38603

Proof-of-concept for CVE-2021-38603: stored cross-site scripting (XSS) vulnerability in PluXML's profile edit page. Demonstrates injection via the…

mbanyamer/cve-2026-26988-librenms-sqli

Proof-of-concept exploit for unauthenticated SQL injection in LibreNMS ajax_table.php, demonstrating time-based and boolean-based blind injection…

pouriam23/dos-via-cache-poisoning-by-forcing-spa-mode-cve-2025-43864-

Proof-of-concept for a denial-of-service attack via cache poisoning by forcing SPA mode, targeting CVE-2025-43864 in React Router applications.

gregk4sec/cve-2026-21962-o

Proof-of-concept for CVE-2026-21962, a critical unauthenticated remote vulnerability in Oracle HTTP Server and WebLogic Proxy Plug-in, demonstrating…

vanlam2001/roller-csrf

PoC exploit for a CSRF vulnerability in Apache Roller v6.1.2 profile update endpoint. Includes HTML form exploit code to demonstrate unauthorized…

afine-com/cve-2022-36432

Cross-site Scripting (XSS) in Preview functionality in Amasty Blog Pro for Magento 2

filipegaudard/cve-2026-33149-poc

Proof-of-concept exploit for CVE-2026-33149, a Host header injection in Tandoor Recipes that enables invite link poisoning and cache poisoning.…

bgarz929/ashwesker-cve-2026-21858

Exploit for CVE-2026-21858, a critical unauthenticated content-type parsing flaw in n8n allowing arbitrary file read, credential theft, and remote…

l4f2s4/cve-2025-49113_exploit_cookies

Authenticated remote code execution exploit for Roundcube Webmail (CVE-2025-49113) via insecure deserialization. Includes session injection, gadget…

moften/cve-2025-31324-nuclei

Nuclei template for cve-2025-31324 (SAP)