security-research

It is an offensive tool for web applications. The repository con...

Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware

This is a PoC exploit for CVE-2021-36260, a command injection vulnerability in the web server of some Hikvision product. The vulnerability allows an attacker to launch a command injection attack by sending malicious commands to the device. The exploit is implemented in Python and provides several...

Exploit for CVE-2025-34030

CVE-2025-34030 - sar2html 'plot' parameter RCE CVSS: 10.0 Cri...

Exploit for CVE-2025-49132

CVE-2025-49132 PoC Improved This is an improved version of...

Exploit for CVE-2025-32778

CVE-2025-32778 - Web-Check Command Injection Exploit !Criti...

Exploit for Code Injection in Xwiki

CVE-2025-24893 - XWiki Platform Remote Code Execution A Pytho...

Exploit for Code Injection in Ispconfig

CVE-2023-46818 PoC This is a python implemntation of the PoC p...

Exploit for PHP Remote File Inclusion in Scripteo Ads_Pro

CVE-2025-4380 - Ads Pro Plugin Burpsuite Request/Response...

Exploit for CVE-2025-49113

CVE-2025-49113 – Roundcube Webmail RCE Exploit Python PoC...

Exploit for Authentication Bypass by Primary Weakness in Crushftp

CVE-2025-31161 - CrushFTP Authentication Bypass Exploit This...

Exploit for Improper Protection of Alternate Path in Vbulletin

CVE-2025-48827 - vBulletin Authentication Bypass Exploit O...

Akamai CloudTest XML Injection

This is a Python-based exploit for CVE-2025-49493, which affects Akamai CloudTest versions before 60 2025.06.02 12988. The vulnerability allows for XML External Entity XXE injection through the SOAP service endpoint...

Exploit for Improper Neutralization in Dlink Dns-320_Firmware

CVE-2024-10915 - D-Link NAS Command Injection Exploit This Py...

Exploit for CVE-2024-25600

Bricks Builder RCE Exploit CVE-2024-25600 This project cont...

Exploit for CVE-2025-49132

CVE-2025-49132-poc I made this poc for CVE-2025-49132https...

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

CVE-2025-32463SudoPoC PoC for CVE-2025-32463: Local privileg...

Exploit for Code Injection in Grafana

CVE-2024-92...

Exploit for Path Traversal in Lakernote Easyadmin

CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This r...

Exploit for Code Injection in Crushftp

CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This r...

Exploit for CVE-2025-6934

🛡️ CVE-2025-6934 - Unauthenticated Privilege Escalation in Opa...