Exploit for Authentication Bypass Using an Alternate Path or Channel in Fortinet Fortiproxy

CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Vulner...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

CVE-2024-30088 Questa repository contiene un Proof of Concept...

Exploit for Deserialization of Untrusted Data in Nextgen Mirth_Connect

CVE-2023-43208 NextGen Healthcare Mirth Connect before versi...

Exploit for Injection in Atlassian Confluence_Data_Center

CVE-2023-22527 Confluence RCE CVE-2023-22527 - RCE Remote Co...

Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware

CVE-2023-20198-IOS-XE-Scanner Single threaded scanner for...

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

OBTENCIÓN DE REVERSE SHELL EXPLOTANDO LA VULNERABILIDAD CVE-20...

Exploit for CVE-2023-38646

Poc-Metabase-Preauth-CVE-2023-38646 Ho to use? λ cve git...

Exploit for Incorrect Authorization in Cacti

CVE-2022-46169 POC This is a Proof of Concept POC script fo...

Exploit for Code Injection in Vmware Spring_Framework

Spring Framework RCE exploitation Quick pentest notes...

Exploit for Improper Initialization in Linux Linux_Kernel

CVE-2022-0847 DirtyPipe Exploit. Credit: Max Kellermann A n...

Exploit for CVE-2022-21907

CVE-2022-21907 - Double Free in http.sys driver !./.github...

Exploit for OS Command Injection in Apache Airflow

CVE-2020-11978: Remote code execution in Apache Airflow's Exa...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apple Ipados

kr00ker ============ Description This script is a simple ex...

Exploit for Cross-site Scripting in Snipeitapp Snipe-It

PoC for CVE-2025-59712 and CVE-2025-59713 This PoC provides a...

Exploit for CVE-2025-56795

CVE-2025-56795 Description Two stored Cross-Site Scripti...

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

CVE-2025-32463: Local Privilege Escalation via Sudo chroot in...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

利用条件 + DefaultServlet 写入功能启用：需在 web.xml 中配置 readonly=false...

Exploit for CVE-2024-38821

CVE-2024-38821: Proof of Concept PoC: Authentication Bypass...

Exploit for Incorrect Authorization in Buddypress

사용법 1. docker를 build하여 취약한 wordpress, buddypress 환경을 구성한다...

Exploit for Injection in Datagear

CVE-2024-37759 PoC Description DataGear version 5.0.0 and...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2024-1086-checker This is a simple checker script to dete...

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 vul check tools This vulnerability allows an at...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

Exploit CVE-2023-22515 A simple basch script exploit for CV...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

CVE-2023-22515 CVE-2023-22515, a critical vulnerability affect...

Exploit for Command Injection in Sophos Web_Appliance

Dork fofa title="Sophos Web Appliance" || app="Sophos-W...

Exploit for SQL Injection in Wordpress

SSI-CVE-2022-21661 Information System's Security 2nd Assignme...

Exploit for Incorrect Authorization in Cacti

CVE-2022-46169 Exploit Exploit to CVE-2022-46169 vulnerability...

Exploit for CVE-2022-21907

This is a PoC exploit for CVE-2022-21907, a HTTP Protocol Stack...

Exploit for Deserialization of Untrusted Data in Forgerock Access_Management

openam CVE-2021-35464 tomcat 执行命令回显. 项目基于 ysoserialhttps:/...

Exploit for Exposed IOCTL with Insufficient Access Control in Dell Dbutil

CVE-2021-21551 Exploit to SYSTEM for CVE-2021-21551 SpoolPrin...

Exploit for CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support Pre-Auth RCE PoC...

Exploit for Improper Initialization in Linux Linux_Kernel

CVE-2022-0847 A simple reproduction of CVE-2022-0847 Orig...

Exploit for Server-Side Request Forgery in Wkhtmltopdf

CVE-2022-35583 Pandoc SSRF POC A Server-Side Request Forgery...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick

CVE-2022-44268 Arbitrary File Read PoC - PNG generator This is...

Exploit for Code Injection in Sqlpad

I am not the researcher w...

Exploit for Code Injection in Xwiki

CVE-2024-31982 PoC and Bulk Scanner !Bannerscreens/scree...

Exploit for Path Traversal in Jenkins

CVE-2024-23897 Jenkins 2.441 and earlier, LTS 2.426.2 and ear...

Exploit for Cross-site Scripting in Cpanel

CVE-2023-29489 -...

Exploit for Code Injection in Vmware Spring_Framework

Spring4Shell: CVE-2022-22965 RCE Java Spring framework RCE...

Exploit for Code Injection in Apache Airflow

Apache Airflow official report description says: A vulnerab...

Exploit for Code Injection in Vmware Spring_Cloud_Function

Exploit for RCE in Spring Cloud CVE 2022-22963 Exploit for...

Exploit for CVE-2022-30190

FOLLINA-CVE-2022-30190 Implementation of FOLLINA-CVE-2022-3019...

Exploit for Missing Authentication for Critical Function in Zohocorp Manageengine_Servicedesk_Plus

Golang-CVE-2021-44077-POC This exploit is an unauthe...

Exploit for CVE-2022-30190

Follina Proof of Concept CVE-2022-30190 Quick and easy "pro...

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

cve-2022-22947 Spring Cloud Gateway is an API gateway in Sp...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase

CVE-2021-41277 Metabase GeoJSON map local fil...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2021-26084 Introduction This write-up provides an over...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Tuzitio Camaleon_Cms

CVE-2024-46987 — Camaleon CMS Arbitrary Path Traversal Fo...

XSSy.uk-Solve-lab-Notes

XSS Lab Solutions Source: https://xssy.uk/allLabs --- No...

Exploit for CVE-2025-11077

CVE-2025-11077 - SQL Injection Author: Byte Reaper D...