7313 matches found
cve-2017-8917
step 1 - download all the files, and has python3 step 2 - install dependency pip install -r requirements.txt step 2.1 - if the dependencies failed to install, might be some Linux restriction, try to use virtual env python3 -m venv venv source ./venv/bin/activate pip install -r requirements.txt st...
CVE-2025-55182_full_exploit
CVE-2025-55182fullexploit this repo have CVE-2025-55182 full exploit with RCE Step to run the exploit 1. Install Dependencies pip install -r requirements.txt 2. Run exploit python3 exploit.py targetlist.txt "command"...
CVE-2022-1592
CVE-2022-1592 POC pip install requests --break-system-packages CVE-2022-1592.py https://tatget.com/...
POC-CVE-2025-52970
POC-CVE-2025-52970 python POC-CVE-2025-52970.py -h usage: POC-CVE-2025-52970.py -h -t TARGET | -l LIST options: -h, --help show this help message and exit -t, --target TARGET Single target URL e.g., https://xx.xx.xx.xx -l, --list LIST Path to file containing target URLs, one per line run poc scri...
CVE-2020-5902-rce-gui
CVE-2020-5902-RCE-Big Vulnerability Exploitation Tool GUI Version v1.0 Tool Usage Instructions For command execution, if the first execution fails, you can try several more times. Batch Target Address Detection Execute Reverse Shell Single Target Address Detection File Upload Software Download Li...
CVE-2026-78119
The Nuvoton NPCX eSPI driver contains an out-of-bounds write vulnerability in the espi_taf_parse() function located in drivers/espi/espi_npcx.c. The driver fails to validate a 12-bit length field from the FLASHRXBUF FIFO header, leading to a copy operation that can exceed the 64-byte espi_taf_pck...
CVE-2026-78119 Out-of-bounds write in the Nuvoton NPCX eSPI Target-Attached-Flash receive path from an unvalidated host-supplied packet length
The Nuvoton NPCX eSPI driver parses Target-Attached-Flash TAF requests in espitafparse drivers/espi/espinpcx.c, taking the 12-bit length field directly out of the request header in the FLASHRXBUF FIFO. For write and RPMC OP1 requests it copied DIVROUNDUPlen, 4 words into struct espitafpckt.src, a...
CVE-2022-26134
CVE-2022-26134 Practice writing PoC in Go Usage go get -u -v github.com/wjlin0/CVE-2022-26134 CVE-2022-26134 -url https://example.com/ Build git clone https://github.com/wjlin0/CVE-2022-26134 cd CVE-2022-26134 && chmod +x build.sh && ./build.sh...
java-vulnerable
Demo consumer for CVE-2016-0714 Tomcat session persistence RCE + CVE-2013-1814 Apache Rave UserApi info disclosure plus four filter-padding Java OSS vulns. context.xml enables PersistentManager → Tomcat chain HOT; applicationContext-security.xml gates /api/rpc/users/ to ROLEADMIN → Rave chain...
CVE-2022-27925
CVE-2022-27925 Setup git clone https://github.com/miko550/CVE-2022-27925.git cd CVE-2022-27925 Usage usage: CVE-2022-2925.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg: http://127.0.0.1 -l LIST, --list LIST List of...
CVE-2025-49132
CVE-2025-49132 Standalone Vulnerability Scanner Non-Docker Implementation This scanner operates directly on Python without Docker dependencies, suitable for environments where Docker is not available or preferred. Installation pip install -r requirements-standalone.txt Manual installation: pip...
zaphoxx-coldfusion
zaphoxx-coldfusion coldfusion exploit based on https://cvedetails.com/cve/CVE-2009-2265/ The main reason I setup a python script for this particular cve was that the metasploit version of the same did not work for me when I tried to solve the HTB machine Arctic. Also it was nice to get some littl...
CVE-2022-22965
CVE-2022-22965 Poc&Exp, supports batch scanning Usage -a string Reverse listening address -b Whether to display banner default true -c string Command default "ls" -p int Reverse listening port -poc Whether to only perform POC scan, default scan only POC default true -r Whether to reverse shell...
CVE-2021-43778
CVE-2021-43778 CVE-2021-43778 poc usage: CVE-2021-43778 http://test.com...
CVE-2014-085
CVE-2014-085 ZooKeeper Unauthorized Access Vulnerability CVE-2014-085 PoC and Lab usage ./nuclei -duc -t zookeeper-unauth.yaml -u ip...
wp-CVE-2017-5487-exploit
WordPress CVE-2017-5487 Exploit in Python Usage Examples: python3 krpexploit.py -h python3 krpexploit.py --url http://examplesite.com...
CVE-2024-9933
CVE-2024-9933 Usage Usage: python CVE-2024-9933 .py option URL Options: check : Verify if the target URL is vulnerable. exploit : Attempt to exploit the vulnerability on the provided URL. Examples: python CVE-2024-9933 .py check http://example.com python CVE-2024-9933 .py exploit http://example.c...
CVE-2026-23744
CVE-2026-23744 python script for exploiting CVE-2026-23744 how to use it : first thing you should open two terminals frist terminal -- nc -nvlp 4444 second terminal -- python CVE-2026-23744.py -lhost your ip -url target url for help menu : python CVE-2026-23744.py -h...
CVE-2023-6710
CVE-2023-6710 Exploit POC Explore the depths of CVE-2023-6710 with our comprehensive Proof of Concept PoC. This CVE, identified as a potential security vulnerability, has been meticulously examined to demonstrate its impact and provide a hands-on understanding of the associated risks. Installatio...