Catálogo de exploits

Exploit for Remote Code Execution in ColdFusion 2021 (CVE-2023-26360)

POC of CVE-2018-9995 written in Rust.

ict519 assignment

CVE-2021-22204 exiftool rce

CaelumIsMe/CVE-2020-29607-POC

Alex-Acero-Security/CVE-2025-20260-POC

aadi0258/Exploit-CVE-2024-23897

Exploit Code for CVE-2018-15473

mcp-remote exposed to OS command injection

kso4more/CVE-2025-0108

I was presented with a high-severity alert indicating a potential exploit attempt of CVE-2023-22515, a zero-day vulnerability in Atlassian Confluence. The alert showed a suspicious GET request from an external IP targeting the Confluence server, suggesting an attempt to gain unauthorised admin access.

Exploit for CVE-2019-11043

Writeup for Tenda AC15 router firmware rehosting and remote command execution (CVE-2020-10987) exploit replication.

srakkk/cve-2024-32002-hook

srakkk/cve-2024-32002-demo

Exploit for CVE-2019-18935

root Privileges

Script to obfuscate a payload the same way as it was done by the XZ utils attack (CVE-2024-3094)

cve-2023-2745

Redux Python3 Version of CVE-2010-2861

moeinmiadi/CVE-2015-1635_PoC

📋 ملخص مشروع MikroTik RouterOS 6.49.18 Exploit Kit 🎯 نظرة عامة تم إنشاء مشروع احترافي وشامل لاختراق أجهزة MikroTik RouterOS 6.49.18 يتضمن جميع المكونات المطلوبة مع واجهة عربية كاملة وتوثيق مفصل. ✅ المكونات المكتملة 1️⃣ سكربتات الاختراق (7 سكربتات ✅ المميزات الرئيسية 1🎯 دعم CVE-2023-30799 اقراء دليل ملخص شامل للاداة PROJECT_SUMMARY.md

CaelumIsMe/CVE-2019-9053-POC

Patch for CVE-2025-54236(a.k.a Session Reaper) which allows customer account takeover and RCE under certain conditions. This patch is actually a Magento 2 extension and universal compatible for Magento 2.3 & 2.4. If you cannot upgrade Magento or cannot apply the official hotfix, try this one.

Proof-of-Concept (POC) of a simple firewall in Python designed to mitigate the Spring4Shell (CVE-2022-22965) RCE attack by inspecting and blocking malicious request bodies.

Custom vulnerable VM (Ubuntu 14.04) designed for teaching multi-stage penetration testing. Features 10 interconnected challenges across Forensics, Web Exploitation (SQLi, XSS), Cryptography, and Kernel Exploitation (OverlayFS/CVE-2015-1328) to achieve full root compromise.

End-to-end Domain Controller exploitation using Metasploit and Impacket: discovered DC10, exploited Zerologon (CVE-2020-1472), extracted NTLM hashes, gained SYSTEM shell, and established a Meterpreter session.

We are presented with a security alert indicating the detection of the Follina (CVE-2022-30190) vulnerability. A malicious Word document triggered msdt.exe execution, suggesting possible remote code execution on the host JonasPRD. Our task is to investigate the alert, confirm exploitation, assess impact, and recommend remediation.

0axz-tools/CVE-2024-51793

CVE-2017-1000367