apache-struts-v2-CVE-2017-5638

apache-struts-v2-CVE-2017-5638 Working POC for CVE 2017-5638 This repo contains a working python example demonstrating the RCE capabilities of CVE 2017-5638. Also for reference is included the Struts Showcase WAR file...

CVE-2025-1337-PoC

PoC for CVE-2025-1337 Proof of concept for the Remote Code Execution RCE vulnerability in the LogServ v1.2 service. Vulnerability Details CVE: CVE-2025-1337 Software: LogServ v1.2 Type: Insecure deserialization of a session object in the sessiondata cookie. Impact: An unauthenticated attacker can...

CVE-2025-57819_FreePBX-PoC

FreePBX SQL Injection Checker 🔍 Safe, read-only SQLi detector for FreePBX’s /admin/ajax.php focused on template, model, and brand parameters. 🛡️ Uses error-based , boolean-based , and time-based techniques to flag potential injection without modifying the database. ✍️ Per-parameter verdicts + clean...

CVE-2026-20079

CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...

CVE-2018-6574

CVE-2018-6574 Vulnerable-code PoC to exploit CVE-2018-6574 on Pentesterlab!!...

jankybank

jankybank Inspired by and largely borrowed from kozmer/log4j-shell-poc Works with eurogig/log4sheller Use to create a CTF based on Log4j...

CVE-2022-44268-automated-poc

CVE-2022-44268 ImageMagick Arbitrary File Read poc Fully Automated ⚙ An information disclosure vulnerability that could be exploited to read arbitrary files from a server when parsing an image. Image Magic version effected Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25 https://imagemagick.or...

CVE-2026-48907

CVE-2026-48907 - Proof of Concept PoC ⚠️ Disclaimer This repository is created for educational and security research purposes only. The author does not condone or support any unauthorized or malicious use of this code. Use it only in environments where you have explicit permission to test security...

CVE-2020-25223

CVE-2020-25223 A PoC script for testing CVE-2020-25223 against an affected Sophos UTM. Given an IP address, the script attempts to download a copy of the devices /etc/shadow file. Original research: https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...

MSDT-0-Day-CVE-2022-30190-Poc

This repository does not have a README...

litellm-sqli-scanner

LiteLLM SQL Injection Scanner CVE-2026-42208 — SQL injection in LiteLLM Proxy Detects and validates CVE-2026-42208: SQL injection vulnerability in LiteLLM Proxy's database layer. For authorized security testing only. Features CVE-2026-42208 SQL injection detection LiteLLM Proxy version...

CVE-2020-1350

This is an educational exercise for honeypot . Use at your own risk. CVE-2020-1350 DNS Vulnerability - CVE-2020-1350 Windows Binary PoC ./cve20201350.exe...

Treck20-Related

Treck20-Related PoC for CVE-2020-11896 Treck TCP/IP stack and device asset investigation Protocol stack inspection As many manufacturers adopt the Treck protocol stack, some manufacturers refer to the Treck protocol stack by way of hardware IP cores. It is not enough to identify vulnerabilities...

CVE-2023-42793

CVE-2023-42793 TeamCity CVE-2023-42793 RCE Remote Code Execution rce.py Inspired by - https://www.prio-n.com/blog/cve-2023-42793-attacking-defending-JetBrains-TeamCity python3 rce.py --url teamcity.runner.htb --command whoami exploit.py This script is copy of...

CVE-2026-63030

Wordpress Core / SQLi 6.9.0 - 6.9.4 7.0.0 - 7.0.1 PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

cve-2019-5736-poc

CVE-2019-5736 Proof of Concept This appends a string to the host runc binary. Bring your own payload see stage2.c. To run: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

CVE-2023-38831-Exploit-and-Detection

CVE-2023-38831-Exploit-and-Detection This repository has both an attack detection tool and a Proof-of-Concept PoC Python script for the WinRAR CVE-2023-38831 vulnerability...

CVE-2017-5638

CVE-2017-5638 CVE-2017-5638 Apache Struts2 RCE Exploit 🛠️ Description This is a simple Python-based PoC for CVE-2017-5638 — a Remote Code Execution vulnerability in Apache Struts 2. ⚠️ Disclaimer This code is provided for educational purposes only. Do NOT use it on any system without explicit...

Why-so-Serious-SAM

HiveNightmare 'Fileless' Exploit PoC: Table of Contents Overview Features Lab Simulation Example Reconnaissance with Google Dorks LOLBins Overview Fileless Dropper Embedding Exploiting Print Spooler & HiveNightmare Reflective DLL Injection MITRE ATT&CK Mapping Detection & Mitigation Legal...

CVE-2019-14040

CVE-2019-14040 Proof-of-concept code for CVE-2019-14040 More details about the vulnerability are available in the blog post. If you have any questions, you are welcome to DM me on Twitter @tamirzb. Build & Run In order to build, run Android NDK's ndk-build. In order to run the PoC, run the binary...