SpringBreaker

SpringBreaker Exploit PoC for Spring RCE issue CVE-2011-2894...

CVE-2022-32250

CVE-2022-32250 This is my exploit for CVE-2022-32250, written entirely based on the research from NCC Group's blog. Tested on: Kernel version 5.13 Success rate: 70% Building Building requires libmnl and libnftnl. make all Disclaimer The Proof-of-Concept and the write-up of the vulnerability are f...

CVE-2022-1388-exploit

CVE-2022-1388-exploit exploit poc...

CVE-2019-0708-EXP-Windows

CVE-2019-0708-EXP-Windows-Version Disclaimer The author's PoC is for research purposes only. If readers use this PoC for other activities, the author is not responsible. Table of Contents toc Introduction CVE-2019-0708-EXP-Windows version runs as a single executable file, no need for Linux, Pytho...

spring4shell-exploit-poc

Spring4Shell Exploit POC Exploit a Spring Application vulnerable to the Spring4Shell vulnerability. Read more about Spring4shell on our blog. Usage Requirements: Docker and docker-compose $ ./exploit.sh Vulnerable Spring Application The vulnerable Spring application contains a GET and POST reques...

CVE-2022-1972-infoleak-PoC

CVE-2022-1972 infoleak PoC Infoleak exploit for the CVE-2022-1972. You can find the associated write-up on our blog Requirements The user namespaces must be available for unprivileged users. $ sysctl kernel.unprivilegedusernsclone kernel.unprivilegedusernsclone = 1 Build make...

CVE-2022-RCE

CVE-2022-XXXX Reverse junk data injection CVE subscription tools exploitation tutorials Exploit POC RCE LOG4j deserialization JNDI Payload CVE-2022-20550 CVE-2022-20551 CVE-2022-20552 CVE-2022-20553 CVE-2022-20554 CVE-2022-20555 CVE-2022-20556 CVE-2022-20557 CVE-2022-20558 CVE-2022-20559...

pub

❤ Be a Hero, tip a 🍺 🙂 ⟶ Ƀ : 1AZMeGVfCBbYwVYyG9s79pJDyocTZgiApa | Ξth : 0x438B38E30eF117C15fBfF833f9C2c70182925815 Exploit PoCs and tools for vulnerabilities disclosed by tintinweb. pub police line - do not cross ==== police line - do not cross ==== police line - do not cross ==== ==== police lin...

CVE-2024-36877

CVE-2024-36877 Exploit POC for CVE-2024-36877 Detailed write-up can be found on my blog - https://jjensn.com/at-home-in-your-firmware https://github.com/user-attachments/assets/71f30cda-61e3-49ea-b856-959746349f2d...

CVE-2019-18818

CVE-2019-18818 Strapi = 3.0.0-beta exploit POC...

Exploits

Exploits Original CVEs, exploit PoCs and security advisories by @kmkz · boffsec-services.com · @kmkzsecurity 2026 File| Target| Type| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Advisory 3-CVE chain| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli...

CVE-2018-18893

CVE-2018-18893 a poc of CVE-2018-18893 reproduce： just run it...

CVE-2022-23935

Introduction CVE-2022-23935 exploit PoC exiftool version 12.37 Installation git clone https://github.com/0xFTW/CVE-2022-23935 cd CVE-2022-23935 chmod +x CVE-2022-23935.py pip3 install pwntools Usage ./CVE-2022-23935...

CVE-2019-9978

CVE-2019-9978 - Social Warfare Wordpress plugin RCE 3.5.3 Remote Code Execution in Social Warfare Plugin before 3.5.3 for Wordpress. This Poc does not require running an additional HTTP Server. Just pass your local IP and the desired port and the exploit will create a server in its own thread...

OpenEMR-RCE

OpenEMR RCE exploit / PoC OpenEMR --shell --user --password --debug exploit.rb semi-auto --root-url --user --password --payload --lhost --lport --debug exploit.rb auto --root-url --user --password --lhost --lport --debug exploit.rb -H | --help Options: -r , --root-url Root URL base path including...

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 This repository contains Detailed explanation and working poc for Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution. Configuration: Create a netcat listner. nc -lnvp 1234 Change the attacker ip to your ip and port. Also create a...

CVE-2019-0708

CVE-2019-0708 PoC exploit for BlueKeep CVE-2019-0708 Usage: ./PoC.py TARGET IP PORT...

CVE-2025-60709

🚨 EXPLOIT PoC — FOR SECURITY RESEARCH, VULNERABILITY ANALYSIS AND DEFENSIVE PURPOSES ONLY 🚨 PoC DE EXPLOIT — SOLO PARA INVESTIGACIÓN DE SEGURIDAD, ANÁLISIS DE VULNERABILIDADES Y FINES DEFENSIVOS 🌐 Idiomas / Languages 🇪🇸 Español 🇬🇧 English 🇪🇸 Documentación en Español Descripción CVE-2025-60709 es...

CVE-2023-1767

Stored XSS snyk.io Discovery 19/03/23 CVE-2023-1767 Responsible Vulnerability Disclosure Report Vulnerability blog post coverage Exploit PoC...

Apache-HTTP-Server-2.4.49-2.4.50-Path-Traversal-Remote-Code-Execution

Apache HTTP-Server 2.4.49-2.4.50 Path Traversal & Remote Code Execution Description This is a PoC script for CVE-2021-41773 & CVE-2021-42013 Usage: python3 exploit.py | Example: Remote Code Execution python3 exploit.py 127.0.0.1 8080 rce 'id' Path Traversal python3 exploit.py 127.0.0.1 8080 file...