Catálogo de exploits

Th3Gl0w/CVE-2025-24893-POC

soltanali0/CVE-2025-5777-Exploit

Bash POC script for RCE vulnerability in XWiki Platform

CVE-2025-24893 is a critical unauthenticated remote code execution (RCE) vulnerability in XWiki, a popular open-source enterprise wiki platform.

Scouserr/cve-2022-0847-poc-dockerimage

PoC to inject a command via the DEVICE_PING endpoint

Agampreet-Singh/CVE-2025-53770

Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated RCE (CVE-2025-34152)

Simulated PoC for CVE-2025-54253: Adobe AEM OGNL Injection Vulnerability

PoC for CVE-2025-24893

esmwaSpyware/DoS-PoC-for-CVE-2020-0796-SMBGhost-

Automated scanner + exploit for CVE-2025-24813

🔒 Spring4Shell Firewall Defense — Cybersecurity Incident Simulation This project is part of a Cybersecurity Job Simulation I completed in August 2025 through Forage. It focuses on detecting, analyzing, and mitigating a simulated real-world cyberattack involving the Spring4Shell (CVE-2022-22965) vulnerability

CVE-2025-54574

Proof-of-Concept exploit for CVE-2025-24893, an unauthenticated Remote Code Execution (RCE) vulnerability in XWiki. Exploits a template injection flaw in the SolrSearch endpoint via Groovy script execution.

PoC | XWiki Platform 15.10.10 - Remote Code Execution

painoob/CVE-2025-32463

Questo script è un proof of concept (PoC) che dimostra una tecnica di privilege escalation (Elevazione di privilegi) sfruttando una vulnerabilità teorica di sudo (es. CVE-2025-32463). Il PoC forza sudo a caricare una libreria .so manipolata sfruttando la funzionalità -R (chroot) e la configurazione personalizzata di NSS (nsswitch.conf).

Webmin CVE-2022-0824 增强版漏洞利用工具 - 支持命令执行和反向Shell双模式

binneko/CVE-2025-50286

Penetration test targeting CVE-2023-7028

CVE-2013-3900 WinVerifyTrust Signature

For Home Lab and Educational Purpose only not intended for any Harmful intenstions purely for educational purpose

beishanxueyuan/CVE-2025-48384-test

CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys

Kai-One001/WordPress-HT-Contact-CVE-2025-7340-RCE

CVE-2025-24893 is a critical unauthenticated remote code execution vulnerability in XWiki (versions < 15.10.11, 16.4.1, 16.5.0RC1) caused by improper handling of Groovy expressions in the SolrSearch macro.

PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11, 16.4.1 and 16.5.0RC1.

A simple Log4j PoC written in Go

This project demonstrates a simulated exploitation of the WinRAR vulnerability CVE-2023-38831 to execute a reverse shell. The purpose of this task was to showcase how attackers can weaponize compressed archive files to gain remote access to a target machine.