red-team-arsenal

🎯 Red Team Arsenal !Versionhttps://img.shields.io/badge/...

Hospital-Management-System

No d...

exploit-chain-generator

Exploit Chain Generator Turn Noise into Signal: Correlate...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55184CVE-...

Exploit for CVE-2026-20805

CVE-2026-20805 PoC Prueba de concepto para la vulnerabilidad...

RCE-Exploit-Tools

RCE Exploit Research Tools Project Overview This repository cont...

Exploit for CVE-2025-67303

ComfyUI Custom Node - AI Enhancement This is a custom node fo...

Exploit for Code Injection in Vmware Spring_Framework

CVE-2022-22965-Spring4Shell-Security-Operations-Analysis A com...

Exploit for CVE-2025-68428

🚨 jsPDF Bulk Detector – CVE-2025-68428 🚨 Asset-wide detecti...

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

🐍 mongobleed-scanner - Scan for MongoDB Vulnerabilities Easily...

PoC_Software-Defined-Perimeter

PoC...

Exploit for CVE-2025-68472

CVE-2025-68472 !1https://github...

📄 n8n Workflow Expression Remote Code Execution

This Metasploit module exploits a critical remote code execution vulnerability CVE-2025-68613 in the n8n workflow automation platform. The vulnerability exists in the workflow expression evaluation system where user-supplied expressions enclosed in are evaluated in an execution context that is no...

📄 Control Web Panel 0.9.8.1208 Remote Code Execution

Control Web Panel CWP versions less than or equal to 0.9.8.1208 are vulnerable to unauthenticated OS command injection. User input passed via the "key" GET parameter to /admin/index.php when the "api" parameter is set is not properly sanitized before being used to execute OS commands. This can be...

Exploit for Uncontrolled Search Path Element in Checkmk

CVE-2024-0...

Buffer-Overflow-Shellcode-Exploitation

Buffer Overflow & Shellcode Exploitation Overview This pr...

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

MongoBleed-Pro ☠️ Advanced MongoDB Memory L...

Web-Check Screenshot API Command Injection RCE

This module exploits a command injection vulnerability in Web-Check's /api/screenshot endpoint. The directChromiumScreenshot function uses childprocess.exec with unsanitized user input, allowing command injection via URL query parameters. The vulnerability was patched in commit...

n8n Workflow Expression Remote Code Execution

This module exploits a critical remote code execution vulnerability CVE-2025-68613 in the n8n workflow automation platform. The vulnerability exists in the workflow expression evaluation system where user-supplied expressions enclosed in are evaluated in an execution context that is not...

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

Proof of conc...