Vulnerability-Research

Vulnerability-Re...

Exploit for Code Injection in Grafana

🚨 CVE-2024-9264 - Grafana SQL injection leading to Remote Code...

Exploit for Improper Protection of Alternate Path in Vbulletin

Description: RCE for Vbullettin versions between 5.0.0 - 5...

Exploit for Path Traversal in Oxidized_Web_Project Oxidized_Web

CVE-2025-27590 - PoC Exploit Command Injection via Multipart...

Exploit for Type Confusion in Microsoft

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Fre...

Exploit for CVE-2025-4631

🚨 CVE-2025-4631 - Profitori WordPress Plugin Privilege Escala...

Exploit for CVE-2025-5287

Description: It is an exploit code that works for multiple...

Exploit for CVE-2025-47577

PoC exploit for CVE-2025-47577, an arbitrary file upload vulnera...

Exploit for Path Traversal in Samsung Magicinfo_9_Server

It is an offensive tool for web exploitation. This PoC exploit t...

Exploit for Improper Input Validation in Microsoft

🛡️ Moniker Link CVE-2024-21413 Room: Moniker Link C...

Exploit for Incorrect Privilege Assignment in Changeweb Unifiedtransform

Description Unifiedtransform v2.0 is vulnerable to Incorrect...

Exploit for CVE-2025-1461

Vuetify VCalendar XSS Vulnerability POC CVE-2025-1461 This...

Exploit for Classic Buffer Overflow in Free5Gc

CVE-2025-29632 the information for the vulnerability covered b...

Exploit for Incorrect Default Permissions in Jrohy Trojan

Jrohy-trojan-RCE-POC Vulnerability Type: Command Injection R...

Exploit for CVE-2025-52078

PoC exploit for CVE-2025-52078, an unauthenticated arbitrary fil...

Exploit for CVE-2025-52078

PoC exploit for CVE-2025-52078, an unauthenticated arbitrary fil...

Exploit for Code Injection in Ispconfig

CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Ba...

Exploit for Argument Injection in Flatpak

CVE-2024-32462 CVE-2024-32462 code exec sbx escape How the di...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071 PoC SMB + TAR Extraction Method This is a Po...

Exploit for OS Command Injection in Php

CVE-2024-4577 취약점 테스트 스크립트 이 Python 스크립트는 PHP의 최신 취약점인 CVE-...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability...

Exploit for CVE-2024-8682

CVE-2024-8682 - JNews Unauthenticated Registration PoC JNew...

Exploit for Code Injection in Langflow

CVE-2025-3248 !https://img.shields.io/badge/license-MIT-blu...

Exploit for CVE-2025-4389

PoC exploit for CVE-2025-4389 is not present in the provided con...

Exploit for CVE-2025-2783

ChromSploit Framework v2.2 🚀 !Python Versionhttps://img...

Exploit for Use of a Broken or Risky Cryptographic Algorithm in File_Away_Project File_Away

POC - CVE-2025-2539 File Away = 3.9.9.0.1 - Missing Author...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Fortinet Fortiproxy

--port 443 --ssl Then use the prompt: FortiOS get sys...

POC

No d...

Vulnerability-Disclosure

It is an offensive tool for web applications. This repository co...

Exploit for Cross-Site Request Forgery (CSRF) in Tychesoftwares Order_Delivery_Date_Pro_For_Woocommerce

This is a PoC exploit for CVE-2025-2907, an unauthenticated arbi...

Exploit for Cross-site Scripting in Roundcube Webmail

CVE-2024-42008-9-exploit The scripts in this repository are ma...

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

PoC for CVE-2025-22457 A remote unauthenticated stack based b...

Exploit for CVE-2025-0868

Penetration Testing Project Report: Exploiting CVE-2025-0868...

Exploit for CVE-2025-24203

iDevice? A major vulnerability discovered by Ian Beer based o...

Exploit for Cross-site Scripting in Roundcube Webmail

CVE-2024-42009 PoC: Email Capture Listener & XSS Exploit in Ro...

Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck

CVE-2023-50564 📌 Description This exploit allows an authe...

Exploit for CVE-2025-25014

POC for CVE-2025-25014 A Prototype pollution vulnerability in...

Exploit for CVE-2025-2294

CVE-2025-2294 🚨 CVE-2025-2294 - Local File Inclusion LFI...

Exploit for Authentication Bypass by Spoofing in Apache Apisix

Apache APISIX 2.12.x Remote Code Execution RCE Exploit This...

Exploit for Authentication Bypass by Primary Weakness in Crushftp

CVE-2025-31161 - CrushFTP User Creation Authentication Bypass...

Exploit for Execution with Unnecessary Privileges in Wftpserver Wing_Ftp_Server

Wing FTP Server 7.4.4 - Remote Code Execution Authenticated...

Exploit for Link Following in Microsoft

CVE-2025-47181 Concept: Microsoft Edge Link Following Privileg...

Exploit for Use After Free in Microsoft

CVE-2025-30400 Concept: Windows DWM Use-After-Free UAF P...

Exploit for Cross-site Scripting in Motivian Content_Management_System

CVE-2025-29094-Multiple-Stored-Cross-Site-Scripting-XSS This r...

Exploit for CVE-2025-0133

CVE-2025-0133 Reflected XSS Detection Tool Author: Derek...

Exploit for CVE-2025-46822

CVE-2025-46822 Unauthenticated Arbitrary File Read via Absolu...

Exploit for CVE-2025-4611

PoC for CVE-2025-4611...

Exploit for Cross-site Scripting in Tinyfilemanager_Project Tinyfilemanager

CVE-2025-44998 Summary A stored cross-site scripting XS...

Exploit for CVE-2025-40775

Project: Exploiting Protocol Vulnerabilities to Manipulate NHI...

Exploit for Out-of-bounds Write in Fortinet Fortiproxy

CVE-2024-21762FortiNetPoC Proof-of-concept scanner targeting...