vulmap

🌟 Vulmap - Web vulnerability scanning and verification tools Click here for the English Version Vulmap is a web vulnerability scanning and verification tool. It can scan and exploit vulnerabilities in webapps. Currently supported webapps include activemq, flink, shiro, solr, struts2, tomcat, unom...

CVE-2012-4681-Armoring

CVE-2012-4681-Armoring Overview A manual antivirus evasion armoring experiment for CVE-2012-4681 inspired by http://security-obscurity.blogspot.com/2012/11/java-exploit-code-obfuscation-and.html. Base Exploit: http://pastie.org/4594319 Results as of 9/26/2014 and 8/2/2016 Sample| Notes| 2014 Scor...

cve-2023-31070

This repository does not have a README...

CVE-2016-5734-docker

CVE-2016-5734-docker PhpMyAdmin 4.0.x—4.6.2 Remote Code Execution Vulnerability CVE-2016-5734 Setup git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 exploit python3 cve-2016-5734.py -u root --pwd="root"...

AOSP-DownloadProviderHeadersDumper

AOSP-DownloadProviderHeadersDumper PoC Exploiting Headers Disclosure in Android's Download Provider CVE-2018-9546 Security Advisory https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-Request-Headers-Disclosure-CVE-2018-9546.pdf More Information...

whmxploit---CVE-2026-41940

This repository does not have a README...

Meltdown

Meltdown PoC for Meltdown in linux CVE-2017-5754 Useage cd meltdown make ./meltdown address size Example Refer http://zzado.tistory.com/category/Report...

DVWA-ZAP-PENTEST

DVWA Vulnerability Assessment using OWASP ZAP A hands-on web application security assessment of DVWA Damn Vulnerable Web App , performed using OWASP ZAP Zed Attack Proxy 2.17.0. This project documents the full workflow: reconnaissance spidering, automated vulnerability scanning, and analysis of t...

imagemagick-lfi-poc

ImageMagick LFI PoC CVE-2022-44268 The researchers at MetabaseQ discovered CVE-2022-44268, i.e. ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image e.g., for resize, the resulting image could have embedded the content of an arbitrary remote file if the...

CVE-2024-29269

Installation and Execution of the script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: git clone git clone...

CVE-2025-46271-Reverse-Shell-PoC

CVE-2025-46271-Reverse-Shell-PoC Disclaimer This repository is for educational purposes only. The information provided here is intended to help developers understand the vulnerability and protect their systems. Do not use this exploit maliciously or without permission. Use of this PoC is at your...

CVE-2020-2655-DemoServer

CVE-2020-2655-DemoServer...

CVE-2026-22862

This repository does not have a README...

WinRAR-Exploit-Tool---Rust-Edition

WinRAR Exploit Tool - Rust Edition Advanced WinRAR Path Traversal Exploit Tool - Written in Rust A high-performance, memory-safe implementation of the WinRAR CVE-2025-8088 exploit tool, rewritten in Rust for better reliability and performance. Features ADS Exploitation - NTFS Alternate Data...

CVE-2023-23397-PoC

CVE-2023-23397-PoC C send only version of CVE-2023-23397-POC-Powershell by Oddvar Moe @oddvarmoe Sends email from the address associated with Outlook account. .\CVE202323397.exe --help CVE202323397 1.0.0.0 Copyright c 2023 -t, --to Required. Recipient email address -p, --path Required. UNC Path -...

cve-2015-3456

Experiments related to CVE-2015-3456 There is: exploit/ is an "exploit" it just crashes QEMU. mock/ contains a stripped down version of QEMU. Only the vulnerability remains. patch/ contains a program to patch a running instance of QEMU. The main point is to not need debug symbols, nor the origina...

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE This exploit rebuilds and exploit the CVE-2019-16098 which is in driver Micro-Star MSI Afterburner 4.6.2.15658 aka RTCore64.sys and RTCore32.sys allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. Instead of hardcoded base...

linux-4.19.72_CVE-2019-19447

This repository does not have a README...

cve-2025-61984-poc

This repository does not have a README...

Zerologon_CVE-2020-1472

Zerologon CVE-2020-1472 This script is made for bulk checking your domain controllers for the Zerologon vulnerability. Note Zerologon vulnerabilities are dangerous for your domain controller, dont use the exploit on production servers. Arguments --ip Ip address for check on CVE-2020-1472 --file...