CVE-2026-3494_Verfication

CVE-2026-3494 - MariaDB serveraudit Logging Verification PoC This project provides a specialized environment to verify and analyze a potential audit logging bypass in the MariaDB serveraudit plugin when specific inline comments , -- are used within SQL queries. Key Findings Logging Omission in...

CVE-2023-23752

Joomla! information disclosure - CVE-2023-23752 exploit Exploit for CVE-2023-23752 4.0.0 = Joomla = 4.2.7. Usage Before using the project we need to install the required packages I recommend creating a virtual environment first pip install -r requierements.txt Proof of Concept To create a...

CVE-2026-23744

CVE-2026-23744 – Proof of Concept The Python script in this PoC sends a simple HTTP request to the target host running MCPJam inspector version replace with your listening port Then, open another shell, and run the PoC: cd CVE-2026-23744 python3 exploit.py References REC in MCPJam inspector due t...

CVE-2022-35411

rpc.py 0.6.0 - Remote Code Execution RCE Exploit fixed by: Liquidsky...

divd-2021-00038--log4j-scanner

divd-2021-00038--log4j-scanner This scanner will recursively scan paths including archives for vulnerable log4j versions and org/apache/logging/log4j/core/lookup/JndiLookup.class files. Currently the allow list defines non exploitable versions, in this case log4j-core 2.17.0 and 2.12.3. Features...

CVE-2021-43616

Repo demonstrating CVE-2021-43616 / https://github.com/npm/cli/issues/2701 Remove the nodemodules folder and run npx npm@8 ci, you can see how npm will install version 2.2.x 2.2.16 at the time of this commit even though package-lock.json requires 2.0.0 cat nodemodules/shortid/package.json I've...

CVE-2025-6998-CalibreWeb-0.6.24-ReDoS

CVE-2025-6998-CalibreWeb-0.6.24-ReDoS Exploit for the redos for CalibreWeb v0.6.24...

Metinfo-6.1.2-SQL-injection

Metinfo-6.1.2-SQL-injection Metinfo 6.1.2 SQL injection script 0-sec.org...

CVE-2019-18818

CVE-2019-18818 Strapi = 3.0.0-beta exploit POC...

cve2025-20265

cve2025-20265 Safe Python script to detect Cisco FMC instances potentially vulnerable to CVE-2025-20265. Uses official FMC API to check version, supports single/multi-target scanning, and includes a harmless local PoC marker. Cisco FMC CVE-2025-20265 Vulnerability Checker Safe What it does: Uses...

CVE-2024-6387

OpenSSH CVE Scanner The OpenSSH CVE Scanner is a Python script designed to scan multiple SSH targets for vulnerabilities based on their OpenSSH version. It utilizes threading for concurrent scanning and integrates logging with colored output for enhanced visibility. Features Multi-threaded...

external_zlib_CVE-2022-37434

ZLIB DATA COMPRESSION LIBRARY zlib 1.2.8 is a general purpose data compression library. All the code is thread safe. The data format used by the zlib library is described by RFCs Request for Comments 1950 to 1952 in the files http://tools.ietf.org/html/rfc1950 zlib format, rfc1951 deflate format...

log4j-1.2.15-mod

This repository does not have a README...

cve-2021-22146

cve-2021-22146 I found during a internal pentest a vulnerability on elastic ECE. Elasticdump is a PoC for CVE-2021-22146 to dump database from elastic ece from 7.10.0 to 7.13.3 https://www.exploit-db.com/exploits/50152 Collaborators: Mario Díaz Caldera...

CVE-2025-6440

CVE-2025-6440 nuclei tamplate to CVE-2025-6440 BETA VERSION, will be update...

CVE-2024-39713

CVE-2024-39713: Rocket.Chat SSRF PoC Description A Server-Side Request Forgery SSRF affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1. Links: https://nvd.nist.gov/vuln/detail/CVE-2024-39713 https://hackerone.com/reports/1886954 Usage pip install -r requirements.txt python3...

CVE-2023-23396

CVE-2023-23396 Here you can download the exploit. Here you can read my report. Here you can buy me a unicorn 🦄 PS At the time of writing 2023-04-07 the client version of Microsoft Excel is still vulnerable here's more information. Share the Knowledge!...

Microweber < 1.2.17 - Cross-Site Scripting

Cross-site Scripting XSS vulnerability in the /demo/editortools/module endpoint via the 'type' parameter. id: CVE-2022-2130 info: name: Microweber 1.2.17 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross-site Scripting XSS vulnerability in the...

Bitrix Site Manager - Remote Code Execution

In the vote aka "Polls, Votes" module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code. id: CVE-2022-27228 info: name: Bitrix Site Manager - Remote Code Execution author: theamanrawat severity: critical description: In the vote aka "Polls, Votes...

webp_server_go 0.4.0 - Path Traversal

webpservergo 0.4.0 contains a path traversal caused by insufficient sanitization in file handling, letting attackers read arbitrary files on the server, exploit requires attacker to send crafted requests. id: CVE-2021-46104 info: name: webpservergo 0.4.0 - Path Traversal author: pikpikcu severity...