CVE-2020-14882-WebLogic-Analysis

Vulnerability Research: Exploitation of the CVE-2020-14882 and CVE-2020-14883 Chain in Oracle WebLogic Server The repository contains a technical report Write-up and a conceptual Proof of Concept PoC demonstrating the chained Authentication Bypass and Remote Code Execution RCE vulnerabilities in...

opmonster

OpMonster CVE-2020-8636 — authenticated remote code execution exploit for Opmon About • Install • Usage • License About OpMonster is a proof-of-concept exploit for CVE-2020-8636 , a remote code execution vulnerability in the Opmon monitoring platform. It abuses the nettools.php endpoint, which le...

CVE-2026-39636-vulnerability-exp

1. Burp Suite must be opened before running here !! And the default Burp Suite port must be 8080. If it is different, you can change it yourself. 2. Download the required libraries pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3. Just run it directly CVE-2026-39363...

Exploit-CVE-2024-34070

Exploit para CVE-2024-34070 Créditos a froxlor por el descubrimiento de la vulnerabilidad. Revisa aquí para más información. Entrénate en Hack The Box. Explotación...

CVE-2026-77806

exp.py link instruction scan.py link...

CVE-2026-15410

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

Malicious code in exprrdd (npm)

The package exprrdd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...

MAL-2026-17244 Malicious code in exprrdd (npm)

The package exprrdd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...

MAL-2026-17246 Malicious code in exptred (npm)

The package exptred impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...

CVE-2025-70830

CVE-2025-70830: Datart Server-Side Template Injection SSTI Vulnerability Overview Overview CVE ID : CVE-2025-70830 Affected Product : Datart Affected Version : v1.0.0-rc.3 Vulnerability Type : Server-Side Template Injection SSTI - Server-Side Template Injection Risk Level : Remote Code Execution...

Sub-folderFetcher

Sub-folder Fetcher 🐣 A script to download specific Vulhub repository folder kibana/CVE-2018-17246 from GitHub. 🚀 Requirements curl unzip 🛠️ Usage chmod +x subfetcher.sh ./subfetcher.sh...

Dompdf-Exploit-RCE

Dompdf-Exploit-RCE An exploit script for CVE-2022-28368 designed to make exploitation less annoying, made for a HTB machine Made to make the exploit less tedious and annoying...

CVE-2026-53805

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

CVE-2021-41773

CVE-2021-41773 The GREENDARK hospital infrastructure was configured by Dr. Gusto Rogue prior to his termination. No further details are provided. Usage: python3 greendark.py...

ExchangeWeaknessTest

ExchangeWeaknessTest This script test the CVE-2021-26855 vulnerability on Exchange Server. Example python3 ExchangeWeaknessTest.py mydomain.com Licence Licensed under the GPL, version 3...

CVE-2023-22515

CVE-2023-22515 Exploit Script Affected versions 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

Dolibarr <7.0.2 - Cross-Site Scripting

Dolibarr before 7.0.2 is vulnerable to cross-site scripting and allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php. id: CVE-2018-10095 info: name: Dolibarr 7.0.2 - Cross-Site Scripting author: pikpikcu severity: medium...

CVE-2020-25223

CVE-2020-25223 A PoC script for testing CVE-2020-25223 against an affected Sophos UTM. Given an IP address, the script attempts to download a copy of the devices /etc/shadow file. Original research: https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...

CVE-2021-3130

CVE-2021-3129 Yet another exploit for CVE-2021-3129! Made to have more features and reliability. Based on https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on...

log4jjndilookupremove

log4jjndilookupremove A simple script to remove Log4J JndiLookup.class from jars in given directory. This script can be used to temporarily resolve the CVE-2021-45046 and CVE-2021-44228, until the application can be repackaged with a proper Log4J version. Usage On Linux or other nix system just r...