CVE-2022-46196

CVE-2022-46196 Description This Python code exploits an unauthenticated command injection vulnerability in Cacti versions up to and including 1.2.22. It uses argparse to parse arguments from the command line, requests to get the HTML content of a target Cacti instance, and BeautifulSoup to extrac...

cve-2016-5345

CVE-2016-5345 Privilage escalation in Qualcomm FM Radio Driver. Exploit tested on ASUS device. Some privileges already required to open the vulnerable device driver. Original CVE discovered by Aravind Machiry donfos of Shellphish Grill Team...

CVE-2023-21887

CVE-2023-21887 Exploit This script scans a list of URLs for the CVE-2023-46805 vulnerability and exploits it Usage 1. Install required dependencies: pip install httpx...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory, the bait file i...

CVE-2018-7750

CVE-2018-7750 Copied from https://www.exploit-db.com/exploits/45712 for archive...

CVE-2024-6387

CVE-2024-6387 This is an altered PoC for d0rb/CVE-2024-6387. This takes glibc addresses and trys to exploit the CVE through them...

cve-2021-4034

CVE-2021-4034 exploit but in rust, cause why not ? Based on https://github.com/arthepsy/CVE-2021-4034/blob/main/cve-2021-4034-poc.c $ ./download-and-unpack-vulnerable-pkexec.sh optionally enable setuid/setgid for testing $ cargo run --bin prep && cd playground && cargo run --bin pwn Finished dev...

CopyFail-Experiment

Just an experiment to verify that the LLM can find this vuln and construct a working exploit. Usage gcc -o poc poc.c ./poc...

Apache-Struts-0Day-Exploit

Apache-Struts-0Day-Exploit Critical Remote Code Execution Vulnerability CVE-2018-11776 Found in Apache Struts. Installation git clone https://github.com/LightC0der/Apache-Struts-0Day-Exploit/ Usage: python ApacheStruts.py URL : www.example.com/ Shell : "Commands" i.e ls, dir, whoami...

docker-cve-2021-41773

CVE-2021-41773 A Demonstration to show the CVE-2021-41773 vulnerability on a docker container. Usage Server run build.shruns docker build ./scripts/build.sh NOTE: No need to do it more than once run deploy.sh creates a docker container with the image from build.sh ./scripts/deploy.sh to close the...

CVE-2022-2414

EN GenXMLExternalEntityExploit is a PoC script for demonstrating an XML External Entity XXE vulnerability exploitation. The script leverages XML payloads to read sensitive files from a target server. This can be useful for security testing, penetration testing, or educational purposes. Features...

Centreon-RCE

Centreon-RCE Centreon v.19.04 Remote Code Execution exploit CVE-2019-13024 Revision of https://github.com/mhaskar/CVE-2019-13024 HOW TO USE: 1. Edit argument defaults for convenience, or don't bottom of script 2. If needed, edit 'editcommand' function to defeat defenses 3. '-v' for...

CVE-2022-41544

CVE-2022-41544 Exploit script for CVE-2022-41544 - RCE in get-simple CMS Usage Usage: python3 CVE-2022-41544.py Example...

CVE-2026-22812-Exp

CVE-2026-22812-Exp CVE-2026-22812...

CVE-2026-31431

CVE-2026-31431 CVE-2026-31431 EXP Kept for record...

CVE-2021-30128-EXP

CVE-2021-30128 Apache OFBiz Deserialization Vulnerability EXP Reference: https://mp.weixin.qq.com/s/Dr-jwiRr4NByjErjiXe1w...

CVE-2020-5902

CVE-2020-5902 Exploit for CVE-2020-5902 POC bash version...

jitsploitation

jitsploitation iOS browser exploit for CVE-2020-9802, an old JIT bug. This is an exploit for a popular JIT compiler bug in the WebKit engine for macOS and iOS originally documented by Project Zero. I re-implemented the exploit for this bug as an exercise in learning browser exploitation. Video...

cve-2019-2215-markw

Bad Binder for markw !CAUTION Everything you do is at your own risk. I am not responsible for your broken device. Adapted with Deepseek V4 Flash Made for the latest Global MIUI 10. Overview Main goal: Get temp root on latest official miui Root can be used for flashing custom abootwhich is what I...

cve-2017-9805.py

CVE-2017-9805.py 1. Better Exploit Code For CVE 2017 9805 apache struts 2. Should be mostly error proof Why Recode? Found that most of the exploit code online simply used string concatenation to insert user supplied commands and insert into an XML string. This isnt very reliable as XML requires...