Catálogo de exploits

cupntlm

ApacheHunter detects CVE-2024-22393 in Apache Answer servers. Like Wappalyzer but CLI-based. Scans headers, page content, meta tags, and paths to identify Apache versions and vulnerable installations (≤1.2.1). No output files—just real-time results.

PoC for CVE-2024-22393: Pixel Flood DoS in Apache Answer ≤1.2.1. Upload crafted 5KB image with fake 64Kx64K dimensions. Server allocates memory for 4B+ pixels and crashes. Find targets via "Powered by Apache Answer." Check bounty program rules before testing—DoS testing is often prohibited.

initial-access

demo application showing off SQL Injection exploit in django 5.2.7

SOC investigation of CVE-2024-49138 exploitation alert involving PowerShell, EDRFreeze execution, and defense evasion behavior in a simulated environment.

swoon69/CVE-2025-59287-Exercise-Use

VX Search Enterprise v10.1.12 Remote Buffer Overflow

CVE-2026-24061

remote-with-credentials

CVE-2026-24061 exploit PoC

Yetazyyy/CVE-2026-0770

local

ZoneMinder Time-Based SQL Injection (CVE-2024-51482) Exploit POC

CVE-2023-38831 is a Zero-day WinRAR vulnerability that lets attackers disguise malicious files in archives, tricking users into executing harmful content.

An automated, high-precision zero-shot evaluation pipeline for OpenAI's CLIP model on CIFAR-10. Features 88.80% accuracy, Safetensors security mitigation (CVE-2025-32434), and AI Native (Trae) workflow.

Penetration testing lab demonstrating CVE-2024-21413 moniker link exploitation for NTLM credential theft, including attack execution, hash cracking, and defensive countermeasures

initial-access

ZenoMinder Blind SQL Injection PoC

gustavorobertux/cisco-cve-2023-20198-checker

PoC for CVE-2025-60787 - Authenticated RCE in motionEye for all versions up to 0.43.1b4 (included)

lil0xplorer/CVE-2025-60787_PoC

A demo and explanation of CVE-2026-31431

initial-access

Dockerized vulnerable lab demonstrating CVE-2024-2083 in ZenML, a path traversal vulnerability in the step logs API allowing arbitrary file read.

0axz-tools/CVE-2025-6440

denial-of-service

initial-access

Professional PoC for CVE-2025-60787: Remote Code Execution in MotionEye (<= 0.43.1b4). This exploit demonstrates an OS Command Injection vulnerability through client-side validation bypass, allowing attackers to execute arbitrary commands via configuration files.

initial-access