CVE-2025-47273-PoC

CVE-2025-47273: setuptools version 78.1.0 - Path Traversal in setuptools.packageindex Disclaimer This Proof of Concept PoC is intended for educational purposes and authorized security auditing only. The author assumes no responsibility for misuse of this information. Unauthorized access to comput...

CVE-2022-41828

CVE-2022-41828 Amazon AWS Redshift JDBC Driver Remote Code Execution RCE The Amazon JDBC Driver for Redshift is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application program interfaces APIs available in the Java Platform, Enterprise Editions. The Driver...

CVE-2024-4956

CVE-2024-4956 Quick and easy exploitation of CVE-2024-4956 for LFI based on original PoC from: VeryLazyTech, https://github.com/verylazytech/CVE-2024-4956. This implementation takes 2 arguments, url and file, and presents the output of the file if it is found...

CVE-2023-30777

CVE-2023-30777 Proof of Concept PoC URL generator for a reflected XSS vulnerability in the Advanced Custom Fields WordPress plugin. PoC Generate by : Alucard0x1 Credit of Exploit : https://patchstack.com/articles/reflected-xss-in-advanced-custom-fields-plugins-affecting-2-million-sites/...

CVE-2012-5321

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2012-5321 Run bellow command to check CVE-2012-5321 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2023-4166

CVE-2023-4166 fofa: Tongda OA python3 CVE-2023-4165.py -h python3 CVE-2023-4165.py -u single URL target file python3 CVE-2023-4165.py -f url.txt Then just verify the address...

CVE-2019-12541

CVE-2019-12541 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in SolutionSearch.do Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText parameter. Author: Concobe of Tarantula Team - VinCSS a member...

CVE-2023-24044

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2023-24044 Run bellow command to check CVE-2023-24044 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2014-0094-test-program-for-struts1

About CVE-2014-0094 and Struts 1 Countermeasures Introduction This article summarizes the impact of CVE-2014-0094 on Struts 1. Unless otherwise noted, all versions were verified using Java 1.7.002, Struts 1.3.10, Apache Tomcat 6.0.39, and FreeBSD 8.2. In no event shall we be liable for the conten...

CVE-2025-69600

CVE-2025-69600 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200966 Command injection in Raynet's rvia allows adversaries to execute commands via getconfig, upload, inventory, and orac...

CVE-2025-24893-POC

CVE-2025-24893-POC A POC for CVE-2025-24893 written in python Usage python3 -u the url...

Follina-MSDT-Vulnerability-CVE-2022-30190-

Follina-MSDT-Vulnerability-CVE-2022-30190- Detection and Remediation of the Follina MSDT Vulnerability CVE-2022-30190 For detail inormatin about Follina-MSDT-Vulnerability-CVE-2022-30190- visit...

RTF-Cleaner

RTF-Cleaner RTF Cleaner, tries to extract URL from malicious RTF samples using CVE-2017-0199 & CVE-2017-8759...

CVE-2022-26134

CVE-2022-26134 Practice writing PoC in Go Usage go get -u -v github.com/wjlin0/CVE-2022-26134 CVE-2022-26134 -url https://example.com/ Build git clone https://github.com/wjlin0/CVE-2022-26134 cd CVE-2022-26134 && chmod +x build.sh && ./build.sh...

drupal-openai-provider-ssrf-cve-2026-13233

Drupal OpenAI Provider — SSRF / local file read via response URL CVE-2026-13233 Untrusted upstream: the provider that fetched the URL its response told it to. Drupal OpenAI Provider aiprovideropenai · SSRF CWE-918 · CVE-2026-13233 · SA-CONTRIB-2026-053 Status: Coordinated disclosure complete...

CVE-2024-24919

CVE-2024-24919 An Vulnerability detection and Exploitation tool for CVE-2024-24919 Installation: git clone https://github.com/RevoltSecurities/CVE-2024-24919 pip install -r requirements.txt python3 exploit.py --help Usage: python3 exploit.py -h / / / / / / / / | |// // / / / / / / / / / / / / /...

claude-code-security-audit

Claude Code Security Audit & CVE-2026-21852 Scanner A security audit and environment hardening tool for Anthropic's Claude Code agentic CLI. Scans repositories for CVE-2026-21852 pre-trust execution surfaces, hook hijacking, malicious base URL redirection, and unauthenticated token exfiltration...

Metabase-cve-2021-41277

Metabase-cve-2021-41277 Metabase arbitrary file read optional arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use eg1:python3 Metabase-cve-2021-41277.py -u http://127.0.0.1 eg2:python3...

CVE-2022-46169

CVE-2022-46169 Setup git clone https://github.com/miko550/CVE-2022-46169.git cd CVE-2022-46169 Usage usage: CVE-2022-46169.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg: http://127.0.0.1 -l LIST, --list LIST List o...

CVE-2024-57241

CVE-2024-57241CNNVD-2024-34500830 For web applications using DEDECMS 5.71SP1 and earlier, URL redirects occur because the source code logic error of the CMS does not judge the input GET request For web applications using DEDECMS 5.71SP1 and below, URL redirection occurs because the CMS source cod...