PoC-CVE-2019-1003030

Jenkins 2.63 Script Security Sandbox Bypass PoC This project automates the creation and delivery of Groovy payloads to the Jenkins SecureGroovyScript validation endpoint used by Jenkins 2.63. The tool supports both interactive and one-shot execution. the exploit doesn't return output so you are...

Exploit for Path Traversal in Apache Ofbiz

CVE-2024-36104-PoC Proof-of-concept for CVE-2024-36104...

Exploit for Code Injection in Xwiki

XWiki RCE Exploit PoC CVE-2025-24893 Overview This repos...

Apache OFBiz Incorrect Authorization Vulnerability

Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker...

VulnCheck KEV: CVE-2024-38856

Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker...

Jenkins < 1.650 - Java Deserialization

import random import string from decimal import Decimal import requests from requests.exceptions import RequestException Exploit Title: Jenkins CVE-2016-0792 Deserialization Remote Exploit Google Dork: intitle: "Dashboard Jenkins" + "Manage Jenkins" Date: 30-07-2017 Exploit Author: Janusz Piechów...