Exploit for Path Traversal in Apache Http_Server

This is a PoC exploit for CVE-2021-41773, a remote code execution vulnerability in Apache HTTP Server versions 2.4.49 and 2.4.50. The exploit targets the CGI enabled feature of these versions, allowing an attacker to execute arbitrary code on the server. The exploit is written in Python and uses...

unserialize-exploit

Remote Code Execution By unserialized functionhttps://not...

security-research

It is an offensive tool for web applications. The repository con...

Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware

This is a PoC exploit for CVE-2021-36260, a command injection vulnerability in the web server of some Hikvision product. The vulnerability allows an attacker to launch a command injection attack by sending malicious commands to the device. The exploit is implemented in Python and provides several...

Exploit for CVE-2025-34030

CVE-2025-34030 - sar2html 'plot' parameter RCE CVSS: 10.0 Cri...

Exploit for CVE-2025-49132

CVE-2025-49132 PoC Improved This is an improved version of...

Exploit for CVE-2025-32778

CVE-2025-32778 - Web-Check Command Injection Exploit !Criti...

Exploit for Code Injection in Xwiki

CVE-2025-24893 - XWiki Platform Remote Code Execution A Pytho...

Exploit for Code Injection in Ispconfig

CVE-2023-46818 PoC This is a python implemntation of the PoC p...

Exploit for PHP Remote File Inclusion in Scripteo Ads_Pro

CVE-2025-4380 - Ads Pro Plugin Burpsuite Request/Response...

Exploit for CVE-2025-49113

CVE-2025-49113 – Roundcube Webmail RCE Exploit Python PoC...

Exploit for Authentication Bypass by Primary Weakness in Crushftp

CVE-2025-31161 - CrushFTP Authentication Bypass Exploit This...

Exploit for Improper Protection of Alternate Path in Vbulletin

CVE-2025-48827 - vBulletin Authentication Bypass Exploit O...

Akamai CloudTest XML Injection

This is a Python-based exploit for CVE-2025-49493, which affects Akamai CloudTest versions before 60 2025.06.02 12988. The vulnerability allows for XML External Entity XXE injection through the SOAP service endpoint...

Exploit for Improper Neutralization in Dlink Dns-320_Firmware

CVE-2024-10915 - D-Link NAS Command Injection Exploit This Py...

Exploit for CVE-2024-25600

Bricks Builder RCE Exploit CVE-2024-25600 This project cont...

Exploit for CVE-2025-49132

CVE-2025-49132-poc I made this poc for CVE-2025-49132https...

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

CVE-2025-32463SudoPoC PoC for CVE-2025-32463: Local privileg...

Exploit for Code Injection in Grafana

CVE-2024-92...

Exploit for Code Injection in Crushftp

CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This r...