CVE-2020-9496
cyber-niz/cve-2020-9496Manual exploit for CVE-2020-9496, an unauthenticated Java deserialization RCE in Apache OFBiz XML-RPC, with step-by-step instructions for payload…
exploitationpayload-generationpenetration-testing+2
cyber-niz/cve-2020-9496Manual exploit for CVE-2020-9496, an unauthenticated Java deserialization RCE in Apache OFBiz XML-RPC, with step-by-step instructions for payload…
s3c/globalprotect-ca-cert-ipcProof-of-concept exploit for CVE-2025-0117 in GlobalProtect, achieving privilege escalation to SYSTEM via a backdoored installer and DLL injection.
absholi7ly/elementor-pro-unauthenticated-arbitrary-file-upload-to-rceCVE-2026-32475 The Elementor Pro Forms File Upload field handles validation and file processing in two separate loops with different handling of…
ccob/threadlessinjectThreadless Process Injection using remote function hooking.
mgeeky/shellcodefluctuationAn advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents
liaomilk/cve-2025-69212-for-myselfjust record for myself
p4x1s/cve-2023-23638-toolsExploit tool for CVE-2023-23638, providing automated exploitation and payload generation for targeted vulnerability assessment and penetration…
cxyofficial/x200-cve-2026-43499Exploit tool targeting CVE-2026-43499 with automated payload delivery and vulnerability verification for penetration testing engagements.
yyqxi/cve-2022-26134CVE-2022-26134poc
viethdgit/cve-2017-0199Exploit for CVE-2017-0199, a Microsoft Office/Word remote code execution vulnerability, enabling payload delivery and security testing.
tanw923/test1https://github.com/Yt1g3r/CVE-2019-3396_EXP.git
kaandemir993/dropper-gcleaner-c2-infrastructure-kernel-driver-powershell-conhost-payload-analysisReverse engineering analysis of Dropper GCleaner, a malware that uses a resilient C2 infrastructure, kernel driver loading, PowerShell/Conhost…
superman-l/cve-2026-16723Reproduces fastjson 1.2.83 @JSONType RCE with a vulnerable Spring Boot target and ASM-based payload generator using HTTP or file protocol jar chains.
realstatus/cve-2026-47858Proof-of-concept exploit for unauthenticated JMX RCE in Spring Tools live information mode, using MLet remote class loading to execute arbitrary…
virtualesp/springpeace(Hopefully) A tool to root for (most) Android devices through CVE-2026-43499
cenobyte-vincit/slot2UEFI GRUB2 bootkit that installs a pre-boot networked implant via NVRAM boot option, chainloads a UKI, executes a dracut payload, and kexecs the…
typedefabcd1234ntd/cve-2026-19501-pocProof-of-concept for unauthenticated CSV formula injection in SureForms, showing crafted form submissions trigger spreadsheet formulas when exported…
cypherhippie/cve-2026-34486---unauthenticated-rce-via-java-deserializationEncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization.