Catálogo de exploits

CVE-2017-7921, CVE-2021-36260 updated 21/01/2026

React Router's createFileSessionStorage() in certain versions allows unsigned cookies to be manipulated, enabling file system access outside the session directory.

CybersRMUTL/CVE-2019-9193-Postgresql-RCE

afifudinmtop/CVE-2021-21425

Final Project in Fundamental network security,POC CVE-202438063

nimesh895/Malware-Analysis-Follina-CVE-2022-30190

abanop22333/Apache-Authentication-Flaw-Research-CVE-2024-38476-

InfoSecAntara/CVE-2025-14847-MongoDB

CVE-2017-7921, CVE-2021-36260 updated 21/01/2026

A small docker lab to play with cve-2026-24061, the inetutils-telnetd authentication bypass.

MOVEit Transfer 2023 mass data breach (CVE-2023-34362)

This Poc demonstrate Arbitrary read/write primitives provided by CVE-2025-7771

SMBv1: CVE-2017-0143, gravedad 8.8, de ejecucion remota de codigo (RCE), en Windows con SMBv1 (ms17-010)

CVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE). Because the tool listens on 0.0.0.0 by default, an attacker can trigger the installation and execution of a malicious MCP server by sending a crafted HTTP request. Version 1.4.3 contains a patch for this issue.

dragosbanica/CVE-2023-0386_POC

This script is used to identify MongoDB services that are network-exposed and allow unauthenticated protocol handshakes.

Spring4Shell (CVE-2022-22965) DFIR lab with exploit simulation, Python WAF, IOC-based detection, and PCAP analysis.

CVE-2025-55182 React Server Components Remote Code Execution Exploit Lab

CVE-2025-55182(命令执行、反弹shell、注入内存马)

SSP H3

A tool designed to exploit CVE-2025-54068 and Remote Command Execution of the Livewire project.

Cacti exploit

CVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE). Because the tool listens on 0.0.0.0 by default, an attacker can trigger the installation and execution of a malicious MCP server by sending a crafted HTTP request. Version 1.4.3 contains a patch for this issue.

vsftpd 2.3.4 (CVE-2011-2523) a critical vulnerability that leads to Reverse Root Shell. In this repo I will do a PoC how to exploit it step by step, Manually & Automatically (Python) for educational purposes.

Vladjrfhfg/React-site-CVE-2025-55182

ViniciusFariasDev/cve-2024-21413-outlook-monikerlink-lab

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.

Killian0713/Assignement_3-CVE-2017-7269

This script audits ServiceNow AI Agents for vulnerabilities like CVE-2025-12420, governance gaps, and compliance risks. Powered by CYBERDUDEBIVASH – your global ecosystem for cybersecurity, AI apps, services, and consulting.

This repository provides a high-fidelity technical deconstruction and production-ready exploitation suite for CVE-2019-5736. It demonstrates how a root user inside a container can achieve a Host Root Shell by overwriting the host runc binary using an OverlayFS mount and ld.so.preload manipulation.