CVE-2022-35499

In Trimble TM4WEB =22.2.0 the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL. Step 1 : The following example URL will trigger the vulnerability and execute the javascript alert function displaying the number...

CVE-2024-36527

CVE-2024-36527 PoC and Bulk Scanner Overview POC for CVE-2024-36527: puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol to read sensitive information from the server. Based on the security advisory published ...

CVE-2019-8451

CVE-2019-8451 https://jira.atlassian.com/browse/JRASERVER-69793 http://host:port/plugins/servlet/gadgets/makeRequest?url=http://:@'.formathost, port, target https://host:port/plugins/servlet/gadgets/makeRequest?url=https://:@'.formathost, port, target...

CVE-2017-10271

CVE-2017-10271 Usage: python CVE-2017-10271.py url...

CVE-2022-24853

CVE-2022-24853 Metabase NTLM Reflection / Relay Attack CVE-2022-24853 Blog Post about the finding: https://secure77.de/metabase-ntlm-relay-attack/ Github Security Advisory: https://github.com/metabase/metabase/security/advisories/GHSA-5cfq-582c-c38m POC...

composer-CVE-2026-40261-CVE-2026-40176-PoC

!CAUTION THIS REPOSITORY CONTAINS PROOF-OF-CONCEPT CODE FOR VULNERABILITIES CVE-2026-40261 AND CVE-2026-40176 IN COMPOSER. !CAUTION THE CODE IS INTENDED FOR EDUCATIONAL AND TESTING PURPOSES ONLY. !CAUTION DO NOT USE THIS CODE IN PRODUCTION ENVIRONMENTS OR AGAINST SYSTEMS WITHOUT PROPER...

Solr-SSRF

Solr-SSRF Apache Solr SSRF Usage - Apache Solr SSRF vulnerability CVE-2021-27905 - Options: -h or --help : Description -u or --url : Site URL address -d or --dnslog : DnsLog Example python3 CVE-2021-27905.py -u URL -d dnslog...

CVE-2021-3131

CVE-2021-3131 Suggested description The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the 'creds' URL parameter. VulnerabilityType Other CWE-522 Insufficiently Protected Credentials Vendor of Product 1C Company Affected Product Code Base 1C:Enterprise 8 -...

SSRF-Exploit-CVE-2024-27564

SSRF-Exploit-CVE-2024-27564 Project Title This project demonstrates a Server-Side Request Forgery SSRF vulnerability in the pictureproxy.php file. Description A vulnerability in pictureproxy.php allows remote attackers to perform arbitrary requests by injecting URLs into the url parameter. This...

CVE-2022-22947

Added two types of reverse shell and network egress detection based on Wang Zheng's code. If any module is missing at runtime, just use pip to download that module. Enter the suspicious URL address. Note: Do not include '/' after the port. 1. First check if the vulnerability exists By default, th...

hoh4

Requirements: python Command: python laravel-ignition-rce.py ""...

CVE-2021-22941

Use python3 exploit -u url --shell http://127.0.0.1/shell --ping 127.0.0.1 Reference https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html...

CVE-2025-30208-Series

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Vulnerability Overview CVE-2025-30208, CVE-2025-31125 and CVE-2025-31486 are arbitrary file reading vulnerabilities in the Vite development server. These vulnerabilities allow an attacker to bypass access controls through specific URL parameters...

CVE-2022-24834-

CVE-2022-24834 python exploit.py -url -port...

CVE-2025-32778

CVE-2025-32778 - Web-Check Command Injection Exploit Description CVE-2025-32778 is a critical command injection vulnerability in Web-Check OSINT tool by Lissy93. It allows unauthenticated attackers to execute arbitrary system commands via the url parameter in the screenshot API. This Python scrip...

CVE-2023-6895

python3 CVE-2023-6895.py -u http://target.com -c cmd...

CVE-2025-55182-exploit

CVE-2025-55182-exploit TL;DR This is for legal penetration testing purposes only. Do not engage in any illegal activities. How to use python3 exploit.py Demo Video...

CVE-2024-33210

CVE-2024-33210 A cross-site scripting XSS vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts into web pages viewed by other users. Vulnerability Type: Cross Site Scripting XSS Vendor of Product: flatpress CMS Affected Product Code...

CVE-2024-27564

CVE-2024-27564 Description: A vulnerability in pictureproxy.php allows remote attackers to perform arbitrary requests by injecting URLs into the url parameter. This SSRF vulnerability can be exploited without authentication, making it particularly dangerous. The vulnerable code is in the...

cve-2025-4664

CVE-2025-4664 This repository contains a PoC for exploiting CVE-2025-4664, a vulnerability where Chromium-based browsers leak sensitive URL parameters through Link header preload requests. Resources For a detailed explanation of how this exploit works, read the blog post:...