CVE-2022-22954
bewhale/cve-2022-22954CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI 漏洞 命令执行、批量检测脚本、文件写入
command-and-controlexploitationpayload-generation+3
bewhale/cve-2022-22954CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI 漏洞 命令执行、批量检测脚本、文件写入
dadosneurais/cve-2023-3824Proof-of-concept exploit for CVE-2023-3824 (PHP phar deserialization) enabling remote code execution via crafted phar archive and reverse shell…
d3vn0mi/cve-2016-16113-poccve-2016-16113
d3fudd/cve-2017-7494_sambacrySambaCry (CVE-2017-7494) exploit for Samba | bind shell without Metasploit
d0n601/cve-2025-6586Download Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload
d0n601/cve-2025-6220Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'
d0n601/cve-2025-6085Make Connector <= 1.5.10 - Authenticated (Administrator+) Arbitrary File Upload
d0n601/cve-2025-13595CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload
d0n601/cve-2025-12673Flex QR Code Generator <= 1.2.6 - Unauthenticated Arbitrary File Upload
d0n601/cve-2024-9162All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection
d0n601/cve-2024-13869Migration,Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file
czeti/baron-sameditThis repository contains a Proof-of-Concept (PoC) exploit for the Baron Samedit vulnerability (CVE-2021-3156). The exploit demonstrates privilege…
cyglegit/cve-2025-24813Automated exploitation toolkit for CVE-2025-24813 targeting Apache Tomcat insecure session deserialization. Features multi-target scanning, gadget…
cybersecurityworks553/log4j-shell-cswA Proof-Of-Concept Exploit for CVE-2021-44228 vulnerability.
cyberheartmi9/cve-2017-12617Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution
crisprss/laravel_cve-2021-3129_expExploit for CVE-2021-3129 targeting Laravel Ignition 2.5.1, leveraging phpggc for remote code execution via malicious log files.
coolyin001/cve-2021-26295--CVE-2021-26295-POC 利用DNSlog进行CVE-2021-26295的漏洞验证。 使用 poc：将目标放于target.txt后运行python poc.py即可。（Jdk环境需<12，否则ysoserial无法正常生成有效载荷） exp：python exp.py…
cckuailong/log4j_rce_cve-2021-44832Proof-of-concept exploit for Log4j 2.17.0 RCE (CVE-2021-44832) using JNDI injection with malicious configuration file deployment.