Catálogo de exploits

skrkcb2/CVE-2025-0851

sariamubeen/CVE-2023-7028

This repository provides an in-depth analysis of the Log4Shell vulnerability (CVE-2021-44228) and implements a machine learning-based approach to detect exploitation attempts in log data.

sariamubeen/CVE-2024-10924

This Proof of Concept (PoC) demonstrates the exploitation of the CVE-2024-4367 vulnerability, which involves Cross-Site Scripting (XSS) attacks.

CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)

Explore CVE-2023-33580 (XSS) & CVE-2023-33584 (SQLI) discovered by me. Dive into vulnerabilities and exploits for insights.

POC for CVE-2024-42327: Zabbix Privilege Escalation -> RCE

This repository contains a Python script to exploit two vulnerabilities: CVE-2019-18818 and CVE-2019-19609.

ModeBrutal/CVE-2024-5084-Auto-Exploit

Browser exploitation framework for Chakra (Edge). Written as part of OSEE preparation. Demo bug: CVE-2019-0567

hopsypopsy8/CVE-2020-1938-Exploitation

php-cgi-cve-2024-4577

A Proof-of-Concept (PoC) exploit for CVE-2024-10924, a vulnerability in the Really Simple SSL WordPress plugin that allows bypassing two-factor authentication (2FA). Includes mitigation techniques to secure affected WordPress sites.

Didarul342/CVE-2024-4577

PoC exploit for CVE-2025-0108 - PAN-OS Authentication Bypass

huseyinstif/CVE-2025-24016-Nuclei-Template

Palo Alto Networks PAN-OS 身份验证绕过漏洞批量检测脚本(CVE-2025-0108)

Apache Struts CVE-2024-53677 Exploitation

This Proof of Concept (PoC) demonstrates an exploit for CVE-2024-42009, leveraging a cross-site scripting (XSS) vulnerability to extract emails from a target webmail application. The attack injects a malicious payload that exfiltrates email content to an attacker-controlled listener.

CVE-2016-6914-UniFiVideo-LPE

luke0x90/CVE-2021-21551

POC for Roundcube vulnerabilities CVE-2024-42008 and CVE-2024-42010

CMS Made Simple < 2.2.10 - SQL Injection python3

Modified exploit for CVE-2021-43798 compatible with both Windows and Linux hosts.

Active Exploitation of Atlassian’s Questions for Confluence App CVE-2022-26134

qnole000/CVE-2024-51378

An unauthenticated attacker can force server points to a shell file like ‘/bin/sh’ and execute arbitrary commands due to the failure in verifying the URL which leads to path traversal to any file that exists in the system. Nostromo’s versions such as 1.9.6 fail to verify this URL

demonstriert, wie mittels missbräuchlicher Nutzung eines Swap-Cookies eine VPN-Session übernommen werden kann. Wichtig: Dieses Projekt dient ausschliesslich zu Bildungs- und Forschungszwecken – bitte nur in Umgebungen verwenden, in denen Du explizit authorisiert bist.

This script exploits a stored XSS vulnerability (CVE-2024-42009) in Roundcube Webmail version 1.6.7. It injects a malicious payload into the webmail system, which, when triggered, exfiltrates email content from the victim’s inbox.