CVE-2021-22206

CVE-2021-22205...

CVE-2024-42009-PoC

CVE-2024-42009 PoC: Email Capture Listener & XSS Exploit in Roundcube Webmail Overview This repository contains a proof-of-concept PoC exploit for CVE-2024-42009 a stored Cross-Site Scripting XSS vulnerability in Roundcube Webmail version 1.6.7 and other several versions. The exploit demonstrates...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Python implementation of a tool for decrypting and encrypting sensitive data in Grafana, specifically addressing the vulnerabilities associated with CVE-2021-43798. Grafana encrypts all data source passwords using the AES algorithm with the secretkey found in the defaults.i...

CVE-2017-5638

CVE-2017-5638 CVE-2017-5638 PoC Exploits...

dlink-dir610-exploits

Exploits for CVE-2020-9376 and CVE-2020-9377 https://vulners.com/cve/CVE-2020-9377 https://vulners.com/cve/CVE-2020-9376 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182...

XSHOCK

⚡ xShock ShellShock ⚡ Written by TMRSWRR Version 1.0.0 xShock ShellShock CVE-2014-6271 This tool exploits shellshock. Instagram: TMRSWRR 🖼️ Screenshots 🖼️ 📹 How to use 📹 Click on the image... 📒 Read Me 📒 All founded directories will be saved in vulnurl.txt file. The results of the executed commands...

poc_monitor

pocmonitor 一个用于寻找 CVE-2024-49112 PoC 的简短爬虫 设置每4小时运行一次的 cron 任务可以保持更新。告警方式可自定义，但此处使用 Discord webhook 向 Discord 频道发送告警。 0 /4 cd /root/monitorscript && /usr/bin/python3 pocmonitor.py /var/log/pocmonitor/pocmonitor.log 2&1 启用调试模式： cd /root/monitorscript && /usr/bin/python3 pocmonitor.py...

CVE-2013-2730

CVE-2013-2730...

CVE-2023-21768

CVE-2023-21768 PoC...

CVE-2025-54236

Adobe Magento SessionReaper LFI PoC A simple Python proof-of-concept demonstrating the CVE-2025-54236 SessionReaper vulnerability affecting vulnerable Adobe Magento versions. Educational and authorized security testing only. Features Automatic target URL normalization Random formkey generation Fi...

cve-2018-14667

cve-2018-14667 cve-2018-14667 demo...

weblogic_cve-2019-2890

1）Start the XXER tool python xxer.py -H 192.168.17.223 2）Place the xxer PoC into the xx.xml file, replace the serialized data, and inject the xxer PoC; java -jar weblogicxxe.jar xx.xml 3）Use weblogic.py from the java-deserialization-exploit tool to send data to the Weblogic server python...

watchtowr-vs-telnetd-CVE-2026-32746

watchtowr-vs-telnetd-CVE-2026-32746 telnetd CVE-2026-32746 的检测工件生成器。 技术细节详见我们的博客文章。 检测演示 root@kitploit: python watchtowr-vs-telnetd-CVE-2026-32746.py --rhost 127.0.0.1 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / /...

CVE-2018-8639-EXP

CVE-2018-8639-EXP CVE-2018-8639 EXP Usage: CVE-2018-8639-EXP.exe command etc 1. Most open-source samples may no longer be capable of bypassing antivirus; modifications are required. 2. I believe that open-sourcing the core code can help those who want to learn. 3. I have learned a lot from the...

cve-2021-45232-exp

apisixdashboardrce 不作恶...

cve-2021-45232-exp

apisixdashboardrce Don't be evil...

CVE-2026-86510

creationtimestamp| type| source ---|---|--- 2026-09-07 19:03:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117231307403147637 2026-09-08 03:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117233183947846621 2026-09-08 03:00:27+00:00| seen|...

Log4Shell-Payloads

🚨 Log4Shell Payloads Collection A curated list of Log4Shell / Log4J exploitation payloads targeting: CVE-2021-45046 CVE-2022-42889 🔗 By @nav1n0x 🔥 One-Liner Payloads ✅ Oneliner 1 root@kitploit: cat vulnerable-hosts.txt | sed 's/https?:////' | xargs -I echo...

CVE-2022-25765

CVE-2022-25765 PoC for Blind RCE for CVE-2022-25765 Tested in HTB - Precious Machine...

Openssl-1.1.1g_CVE-2022-4304

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...