CVE-2019-5475-Nexus-Repository-Manager-

CVE-2019-5475-Nexus-Repository-Manager- Payload PUT /nexus/service/siesta/capabilities/xxxxxxxxx HTTP/1.1 Host: xxxx.xxxx.com User-Agent: Accept: application/json,application/vnd.siesta-error-v1+json,application/vnd.siesta-validation-errors-v1+json Accept-Language:...

CVE-2021-44228-PoC

CVE-2021-44228 Log4Shell Proof of Concept Apache Log4j2 =2.14.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute...

lightweight_static_analysis

Lightweight Static Analysis This repo contains the PoC code for a ShellCon 2019 talk, "Rolling Your Own: How to Write Custom, Lightweight Static Analysis Tools" slides. In a nutshell, this repo demonstrates a few concrete examples of how you can build some interesting static analyses using open...

magisk-renef

MagiskRenef A Magisk / KernelSU / APatch module that automatically packages and runs renef — a dynamic instrumentation toolkit for Android. Inspired by magisk-frida. Requirements Rooted Android device Magisk / KernelSU / KernelSU Next / APatch ARM64 only — renef only supports ARM64 Android Androi...

cve-2018-14667

cve-2018-14667 POC for CVE-2018-14667 Original analysis and POC: https://paper.seebug.org/765/ Ref: https://web.archive.org/web/20190501081357/https://tint0.com/when-el-injection-meets-java-deserialization/...

CVE-2024-2997

CVE-2024-2997 Scanner Overview CVE-2024-2997 Scanner is an advanced vulnerability scanner designed to detect the command injection vulnerability in web applications. This tool helps security professionals identify potential security risks in their applications. Disclaimer This tool is for...

CVE-2022-22954_VMware_PoC

CVE-2022-22954 PoC - VMware Workspace ONE Access Freemarker Server-Side Template Injection A vulnerability, which was classified as very critical, was found in Vmware Workspace ONE Access and Identity Manager. Affected component is Template Handler. Reference: https://vuldb.com/?id.196644 Usage:...

Joomla_CVE-2015-8562

JoomlaCVE-2015-8562 A proof of concept for Joomla's CVE-2015-8562 vulnerability Object Injection RCE Intro/Changelog This PoC is the second version of the implementation hosted at exploit-db. -Fixed regenerate session -Added the option to switch from X-Forwarded-For to User-Agent method -Added th...

exploit-CVE-2022-25765

Exploit for CVE-2022-25765 pdfkit - Command Injection Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description The package pdfkit from 0.0.0 are vulnerable to Command Injection where...

CVE-2025-54100

CVE-2025-54100 – PowerShell Response Parsing PoC A concise Proof-of-Concept showing how CVE-2025-54100 can lead to Remote Code Execution RCE in Windows PowerShell 5.1 through malicious HTML parsing. Table of Contents What is CVE-2025-54100? How the PoC Works Quick Start Triggering From a Victim...

intentshield

IntentShield Don't filter what your AI says. Filter what it's about to do Pre-execution intent verification for AI agents. Why This Exists AI agents have tool access. They can execute shell commands, write files, browse URLs, send emails, and call APIs. Every one of those actions is a potential...

agentsid-scanner

AgentsID Scanner The Lighthouse of agent security. Scan any MCP server. Get a security report card. Your MCP server exposes tools to AI agents. How secure is it? Most MCP servers ship with no authentication, no per-tool permissions, no input validation, and tool descriptions vulnerable to prompt...

CVE-2023-27372

CVE-2023-27372 Exploit Exploit for CVE-2023-27372 , an unauthenticated Remote Code Execution vulnerability in the SPIP CMS affecting versions prior to 4.2.1. ⚠️ For educational purposes only. Use exclusively on systems you own or have explicit written permission to test. Unauthorized use is...

CVE-2026-4480-PoC

CVE-2026-4480: Samba print-command %J injection PoC Important — Read this first: This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written authorization...

injection

This repository does not have a README...

Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-

This script targets the Nexus Repository Manager 3 EL injection vulnerability CVE-2018-16621, and performs one-click exploitation to get a reverse shell. Running Example: Run the script on the attacker machine, enter the target IP, port, local listener IP and port as prompted, then execute the...

CVE-2025-50881

CVE-2025-50881: Remote Code Execution in API Use it Flow via moniteur.php Identifier: CVE-2025-50881 Affected Product: API Use it Flow Version 8.2.0 Rev 15851, Version 9.2.0 Rev 18093 Editor: https://www.tenorsolutions.com formerly https://api-sas.fr/ Affected Components: flow/admin/moniteur.php...

TP-Link-WDR-Router-Command-injection_POC

This repository does not have a README...

CVE-2025-25705

CVE-2025-25705 Description Item: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Vulnerability Type: Remote Code Execution...

wp2shell

wp2shell — Pre-Auth RCE in WordPress core Unauthenticated WordPress core RCE PoC chaining CVE-2026-63030 + CVE-2026-60137. Authorized testing only. wp2shell.py is a single-file, standard-library-only proof of concept that chains two WordPress core vulnerabilities into unauthenticated remote code...