Catálogo de exploits

Missing Authentication for Critical Function (CWE-306)-Exploit

Exploitation module for CVE-2025-32433 (Erlang/OTP)

python script to find vulnerable targets of CVE-2025-32433

Erlang/OTP SSH 远程代码执行漏洞

This is for educational porpuses only. Please do not use agains unathorized systems.

ethicalPap/CVE-2025-29775

verylazytech/CVE-2025-29306

exploit script for CVE-2024-45436

NGINX Security Hardening & Vulnerability Remediation Analysis of critical CVEs (CVE-2021-23017, HTTP/2 DoS flaws) in outdated NGINX versions, with actionable steps for mitigation: upgrades, HTTP/2 hardening, and patch automation. Includes Nessus scan validation and proactive monitoring strategies.

verylazytech/CVE-2025-3248

This is a proof of concept of the critical WinBox vulnerability (CVE-2018-14847) which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and update it yourself instead.

CVE-2024-3094 실습 환경 구축 및 보고

mhamzakhattak/CVE-2025-29927

enochgitgamefied/NextJS-CVE-2025-29927

Simulates CVE-2025-29927, a critical Next.js vulnerability allowing attackers to bypass middleware authorization by exploiting the internal x-middleware-subrequest HTTP header. Demonstrates unauthorized access to protected routes and provides mitigation strategies.

Exploits Python cve-2019-9053– by HackHeart

CMS Made Simple ≤ 2.2.9 SQL Injection Vulnerability CVE-2019-9053 is a vulnerability found in CMS Made Simple (CMSMS) versions up to 2.2.9, where the application is vulnerable to a blind time-based SQL injection

CVE-2019-9053.

celsius026/poc_CVE-2025-24016

Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion

The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be used to obtain remote code execution,

PoC for CVE-2023-27350

POC for CVE-2023-40028: Ghost CMS Arbitrary File Read

Exploit for CVE-2025-29927 (Next.js) - Authorization Bypass

Kiểm thử xâm nhập

CVE-2024-4367

Kiểm thử xâm nhập

HTTP/2 Rapid Reset Exploit PoC

pulentoski/Explotacion-CVE-2023-32315-Openfire

Laboratorio técnico de ciberseguridad donde se realiza reconocimiento de red con Nmap y explotación de la vulnerabilidad CVE-2011-2523 (vsftpd 2.3.4) mediante Metasploit Framework. Proyecto académico orientado a demostrar habilidades en análisis de vulnerabilidades, uso de herramientas de pentesting y reporte técnico.