Catálogo de exploits

skrkcb2/CVE-2025-0851

sariamubeen/CVE-2023-7028

This repository provides an in-depth analysis of the Log4Shell vulnerability (CVE-2021-44228) and implements a machine learning-based approach to detect exploitation attempts in log data.

This Proof of Concept (PoC) demonstrates the exploitation of the CVE-2024-4367 vulnerability, which involves Cross-Site Scripting (XSS) attacks.

ModeBrutal/CVE-2024-5084-Auto-Exploit

Explore CVE-2023-33580 (XSS) & CVE-2023-33584 (SQLI) discovered by me. Dive into vulnerabilities and exploits for insights.

Proof of concept for CVE-2024-42327: Zabbix privilege escalation to RCE

CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)

This repository contains a Python script to exploit two vulnerabilities: CVE-2019-18818 and CVE-2019-19609.

Browser exploitation framework for Chakra (Edge). Written as part of OSEE preparation. Demo bug: CVE-2019-0567

hopsypopsy8/CVE-2020-1938-Exploitation

Didarul342/CVE-2024-4577

PoC exploit for CVE-2025-0108 - PAN-OS Authentication Bypass

php-cgi-cve-2024-4577

A Proof-of-Concept (PoC) exploit for CVE-2024-10924, a vulnerability in the Really Simple SSL WordPress plugin that allows bypassing two-factor authentication (2FA). Includes mitigation techniques to secure affected WordPress sites.

huseyinstif/CVE-2025-24016-Nuclei-Template

POC for Roundcube vulnerabilities CVE-2024-42008 and CVE-2024-42010

Palo Alto Networks PAN-OS 身份验证绕过漏洞批量检测脚本(CVE-2025-0108)

luke0x90/CVE-2021-21551

This Proof of Concept (PoC) demonstrates an exploit for CVE-2024-42009, leveraging a cross-site scripting (XSS) vulnerability to extract emails from a target webmail application. The attack injects a malicious payload that exfiltrates email content to an attacker-controlled listener.

CMS Made Simple < 2.2.10 - SQL Injection python3

Apache Struts CVE-2024-53677 Exploitation

CVE-2016-6914-UniFiVideo-LPE

Active Exploitation of Atlassian’s Questions for Confluence App CVE-2022-26134

An unauthenticated attacker can force server points to a shell file like ‘/bin/sh’ and execute arbitrary commands due to the failure in verifying the URL which leads to path traversal to any file that exists in the system. Nostromo’s versions such as 1.9.6 fail to verify this URL

qnole000/CVE-2024-51378

Modified exploit for CVE-2021-43798 compatible with both Windows and Linux hosts.

yenyangmjaze/cve-2024-10914

This script exploits a stored XSS vulnerability (CVE-2024-42009) in Roundcube Webmail version 1.6.7. It injects a malicious payload into the webmail system, which, when triggered, exfiltrates email content from the victim’s inbox.

demonstriert, wie mittels missbräuchlicher Nutzung eines Swap-Cookies eine VPN-Session übernommen werden kann. Wichtig: Dieses Projekt dient ausschliesslich zu Bildungs- und Forschungszwecken – bitte nur in Umgebungen verwenden, in denen Du explizit authorisiert bist.