CVE-2022-36779

authenticated Command Injection for CVE-2022-36779 enjoy :...

CVE-2021-27246_Pwn2Own2020

Pwn2Own 2020 Tokyo Edition - TPlink exploit Here is the files used to exploit the TPlink Archer router during the Pwn2Own 2020 Tokyo. The vulnerability has CVE-2021-27246 number. You can check blogpost on the synacktiv website for the details...

cve-2024-6387-nuclei-template

CVE-2024-6387 Nuclei Template Nuclei template to detect CVE-2024-6387 regreSSHion by OpenSSH software version...

CVE-2025-69212-PoC

CVE-2025-69212 OpenSTAManager = 2.9.8 — OS Command Injection in P7M File Processing Overview...

cpx_proftpd

cpxproftpd PoC by Daniel Aldana for CVE-2015-3306 exploitation. Bug reported by Vadim Melihow. METHOD 1: usage: root@kitploit: python cpxproftp.py ex: root@kitploit: python cpxproftp.py 127.0.0.1 /etc/passwd /var/www/pass.txt then try: root@kitploit: http://127.0.0.1/pass.txt METHOD 2: usage:...

CVE-2021-44228-POC

CVE-2021-44228-POC exploit CVE-2021-44228 download nuclei sudo cp nuclei /usr/bin/nuclei sudo chmod +x /usr/bin/nuclei git clone https://github.com/sec13b/CVE-2021-44228-POC.git mv CVE-2021-44228-POC log4shellexploit mkdir yaml mv .yaml yaml/ run: python3 log4shellexploit.py http://iptoexploit...

ghostlock-selinux-disabler

GhostLock SELinux Disabler Write-1-only extraction of JoinChang/ghostlock-oneplus for CVE-2026-43499. It disables SELinux enforcing on supported, vulnerable OnePlus kernels with a locked bootloader, and does nothing else: no cred overwrite, no root shell, no KernelSU, no bootstrap, and no KASLR...

MiniPlasma-Runner

MiniPlasma-Runner Nightmare-Eclipse/MiniPlasma CVE-2020-17103 の修正版で、C2使用に適合させたもの。 元のPoCはディスクからのみ動作します。このバージョンはexecute-assemblyを介してメモリ上で完全に動作し、検出を回避するために分割バイナリアプローチを採用しています。 免責事項...

noPac

About NoPac exploit, exploiting some old vulnerabilities CVE-2021-42278 and CVE-2021-42287 to impersonate a domain admin from a standard user. No more annoying dependencies, just a single binary holy shit i love Go, Python could NEVER. The -shell flag just spawns impacket-smbexec. You can also ju...

CVE-2024-42009-PoC

CVE-2024-42009 PoC: Email Capture Listener & XSS Exploit in Roundcube Webmail Overview This repository contains a proof-of-concept PoC exploit for CVE-2024-42009 a stored Cross-Site Scripting XSS vulnerability in Roundcube Webmail version 1.6.7 and other several versions. The exploit demonstrates...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Python implementation of a tool for decrypting and encrypting sensitive data in Grafana, specifically addressing the vulnerabilities associated with CVE-2021-43798. Grafana encrypts all data source passwords using the AES algorithm with the secretkey found in the defaults.i...

poc_monitor

pocmonitor A short scraper looking for a POC of CVE-2024-49112 Setting a cron job to run the script every 4 hours will keep the updates in place. The alerting can be customized but used Discord webhook to alert a Discord channel. 0 /4 cd /root/monitorscript && /usr/bin/python3 pocmonitor.py...

dlink-dir610-exploits

Exploits for CVE-2020-9376 and CVE-2020-9377 https://vulners.com/cve/CVE-2020-9377 https://vulners.com/cve/CVE-2020-9376 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182...

CVE-2025-54236

Adobe Magento SessionReaper LFI PoC A simple Python proof-of-concept demonstrating the CVE-2025-54236 SessionReaper vulnerability affecting vulnerable Adobe Magento versions. Educational and authorized security testing only. Features Automatic target URL normalization Random formkey generation Fi...

CVE-2022-25765

CVE-2022-25765 PoC for Blind RCE for CVE-2022-25765 Tested in HTB - Precious Machine...

Exploit-Joomla

ep4-redes CVE-2017-8917 SQL injection Vulnerability in Joomla! 3.7.0 exploit Explanation about the vulnerability: https://blog.sucuri.net/2017/05/sql-injection-vulnerability-joomla-3-7.html...

Driver-RW

Driver-RW Elevate to NT AUTHORITY\SYSTEM with CVE-2018-19321 Tested on WIndows 10 v1511...

TFC-Chrome-v8-bug-CVE-2021-38001-poc

TFC-Chrome-v8-bug-CVE-2021-38001-poc run d8 with commandline: ./d8 2.mjs...

CVE-2020-14882

Thank you NS-Sp4ce、Jas502n、s1kr10s、demon、斯文 reference： https://github.com/NS-Sp4ce/CVE-2020-14882 https://github.com/jas502n/CVE-2020-14882 https://github.com/s1kr10s/CVE-2020-14882 usage: CVE-2020-14882.py -h -u URL -f FILE -c CMD optional arguments: -h, --help show this help message and exit -u...

CVE-2026-59178

creationtimestamp| type| source ---|---|--- 2026-09-14 18:50:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvirnn6qjc2j 2026-09-14 19:32:08+00:00| seen| https://gist.github.com/alon710/3693f8803a657bff4ffb362747901533 2026-09-14 20:00:44+00:00| seen|...