ac8999/cve-2025-27636-rce-in-apache-camelPython PoC exploiting CVE-2025-27636, an Apache Camel header injection RCE, supporting command execution, file reads, and reverse shell payloads.
simoesctt/ctt-mailpit-rce-v1.0---temporal-resonance-mail-server-takeoverExploit tool that transforms SMTP header injection into remote code execution with self-propagating worm capabilities, featuring persistence…
boreas37/cve-2026-73034-pocCVE-2026-73034 — DB-GPT v0.8.1 unauth path traversal → arbitrary file write as root via user-id header. Verified + fix diff
george0papasotiriou/cve-2026-11108-integer-overflow-in-memory-allocator-kmalloc-sim-Demonstrates CVE-2026-11108 integer overflow in kmalloc simulation, causing heap overflow and potential arbitrary code execution from crafted…
george0papasotiriou/cve-2026-21003-jwt-none-algorithm-bypass-via-kid-header-omissionProof-of-concept exploit for CVE-2026-21003 demonstrating JWT authentication bypass by omitting the kid header and using the 'none' algorithm to…
synacktiv/cve-2025-59712_cve-2025-59713Snipe-IT PoC exploit for CVE-2025-59712 and CVE-2025-59713
mindpatch/zaphosterFix host header error in zaproxy
monzaviman/cve-2025-9816Proof of Concept for Stored-XSS on Vulnerable WP-Statistics Plugin known as CVE-2025-9816
danyw24/cve-2004-1561-icecast-header-overwrite-buffer-overflow-rce-2.0.1-win32-Exploit for CVE-2004-1561 Icecast header overwrite buffer overflow on Windows, providing remote code execution with a reverse shell payload.
k1nakoo/cve-2024-10410Proof-of-concept exploit for CVE-2024-10410: unrestricted file upload in Online Hotel Reservation System. Demonstrates bypass of image validation via…
oscerd/cve-2026-33454Reproducer for CVE-2026-33454: Apache Camel camel-mail header injection to RCE via camel-exec
zcgonvh/cve-2017-7269-toolCVE-2017-7269 to webshell or shellcode loader
jas502n/st2-046-pocst2-046-poc CVE-2017-5638
ivanitlearning/cve-2004-1561Icecast Header Overwrite buffer overflow RCE < 2.0.1 (Win32)
hunthubspace/cve-2024-3105-pocA PoC Exploit for CVE-2024-3105 - The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress Remote Code Execution (RCE)
homjxi0e/cve-2017-5638Exploit for Apache Struts2 remote code execution vulnerability (CVE-2017-5638) via Content-Type header manipulation.
eerykitty/cve-2020-0796-pocPoC for triggering buffer overflow via CVE-2020-0796
cafnet/apache-struts-v2-cve-2017-5638Python proof-of-concept exploit for Apache Struts2 RCE vulnerability CVE-2017-5638, demonstrating remote code execution via crafted Content-Type…
