archive-puma/securitynotfoundStealthy PHP webshell disguised as a 404 error page with AJAX console, hidden command execution via Referrer header, and preconfigured actions for…
gotr00t0day/forbiddenpassMulti-domain HTTP 403 bypass scanner that tests header manipulation techniques to discover hidden access paths on web servers, supporting bulk domain…
boreas37/cve-2026-73034-pocCVE-2026-73034 — DB-GPT v0.8.1 unauth path traversal → arbitrary file write as root via user-id header. Verified + fix diff
bongbongco/cve-2017-5638Proof-of-concept exploit for Apache Struts2 remote code execution vulnerability CVE-2017-5638, demonstrating exploitation via crafted Content-Type…
synacktiv/cve-2025-59712_cve-2025-59713Snipe-IT PoC exploit for CVE-2025-59712 and CVE-2025-59713
thestingr/cve-2025-25257Public PoC for CVE-2025-25257: FortiWeb pre-auth SQLi to RCE
aardwolfsecurityltd/bulk_403_bypassBash script that adds custom HTTP headers to requests for bulk testing of 403 bypass techniques on web applications.
ac8999/cve-2025-27636-rce-in-apache-camelPython PoC exploiting CVE-2025-27636, an Apache Camel header injection RCE, supporting command execution, file reads, and reverse shell payloads.
hahwul/jwt-hackJSON Web Token Hack Toolkit
george0papasotiriou/cve-2026-21003-jwt-none-algorithm-bypass-via-kid-header-omissionProof-of-concept exploit for CVE-2026-21003 demonstrating JWT authentication bypass by omitting the kid header and using the 'none' algorithm to…
mindpatch/zaphosterFix host header error in zaproxy
k1nakoo/cve-2024-10410Proof-of-concept exploit for CVE-2024-10410: unrestricted file upload in Online Hotel Reservation System. Demonstrates bypass of image validation via…
simoesctt/ctt-mailpit-rce-v1.0---temporal-resonance-mail-server-takeoverExploit tool that transforms SMTP header injection into remote code execution with self-propagating worm capabilities, featuring persistence…
eerykitty/cve-2020-0796-pocPoC for triggering buffer overflow via CVE-2020-0796
ivanitlearning/cve-2004-1561Icecast Header Overwrite buffer overflow RCE < 2.0.1 (Win32)
jas502n/st2-046-pocst2-046-poc CVE-2017-5638
oscerd/cve-2026-33454Reproducer for CVE-2026-33454: Apache Camel camel-mail header injection to RCE via camel-exec
hunthubspace/cve-2024-3105-pocA PoC Exploit for CVE-2024-3105 - The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress Remote Code Execution (RCE)
