pdfjs-vuln-demo

PDF.js Vulnerability Demo Project This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js pdfjs-dist library reported in CVE-2024-4367 Getting Things Running Fork and clone from this repository npm install npm run dev Testing Things Out...

BadBash

BadBash CVE-2014-6271 ShellShock RCE PoC tool ======= BadBash is a CVE-2014-6271 RCE exploit tool. The basic version only checks for the HTTP CGI site and only provides netcat reverse shell on port 1234. Developer : Andy Yang Version : 0.1.0 License : GPLv3 Orginal github project :...

cisco-CVE-2023-20198-tester

Cisco Tester: Vulnerability Detection Script Table of Contents Overview Features Prerequisites Installation Usage Output Contributing Overview The ciscotester.py script is designed to assess multiple IP addresses for a specific Cisco vulnerability CVE-2023-20198. It performs an HTTP or HTTPS POST...

react2shell-scanner

React2Shell Vulnerability Scanner A safe, non-invasive scanner for detecting React Server Components RSC and Next.js Remote Code Execution vulnerabilities CVE-2025-55182 & CVE-2025-66478. Overview This scanner helps organizations identify whether their web services are vulnerable to the React2She...

CVE-2018-16156-Exploit

CVE-2018-16156-Exploit...

cve-2017-7494

CVE-2017-7494 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-7494 Image author: https://github.com/opsxcq/exploit-CVE-2017-7494...

platform_art_CVE-2021-0394

This repository does not have a README...

Openssl-1.1.1g_CVE-2022-4304

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2017-18044-Exploit

CVE-2017-18044 Native POC This is a dead simple POC for the CVE-2017-18044 command injection vulnerability in Commvault v11 SP5 and older. For metasploit users, a ruby version of the exploit is also bundled with the lastest build...

CVE-2019-7839

This repository does not have a README...

pwnfb50

pwnfb50 Transfer ownership of any FB50 smart lock to yourself CVE-2019-13143 PoC Video Usage root@kitploit: $ python3 pwnfb50.py id mac Where id is your user ID, and the mac is your lock's MAC address...

CVE-2019-1579

This repository does not have a README...

text4shell-poc

CVE-2022-42889 PoC Test Application This is a vulnerable application developed as a Proof of Concept for the vulnerability CVE-2022-42889. Maven Installation In order to run this you will need: JDK 17 or above Maven 1. Clone the git repo root@kitploit: git clone...

CVE-2016-3962-Exploit

CVE-2016-3962, CVE-2016-3989 POC Exploit This is a proof of concept exploit for version V5.30p of the web configuration interface for Meinberg NTP Time Server. This exploit also utilitizes CVE-2016-3989 to escalate to the root user. More details about the vulnerabilities can be found at:...

citrixInspector

CVE-2023-3519 Inspector The cve20233519inspector.py is a Python-based vulnerability scanner for detecting the CVE-2023-3519 vulnerability in Citrix Gateways. It performs a passive analysis and fingerprinting of target websites to assess their vulnerability based on a series of checks. Recent...

CVE-2020-9547

CVE-2020-9547：FasterXML/jackson-databind Remote Code Execution Vulnerability...

laravel-poc-CVE-2018-15133

Laravel Remote Code Execution when APPKEY is leaked PoC CVE-2018-15133 This repository contains a simple Laravel 5.6.29 application on PHP 7.2.10 with one basic noop route added in routes/web.php see Dockerfile and Proof of Concept exploit cve-2018-15133.php for CVE-2018-15133 that should...

CVE-2019-7213

This repository does not have a README...

CVE-2016-0846

This repository does not have a README...

CVE-2022-2414

EN GenXMLExternalEntityExploit es un script PoC para demostrar la explotación de una vulnerabilidad de Inclusión de Entidades Externas XML XXE. El script aprovecha cargas útiles XML para leer archivos confidenciales de un servidor objetivo. Puede ser útil para pruebas de seguridad, pruebas de...