E

exploit

D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange.

For more information visit https://dheatattack.com

WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read

Root-Level RCE via OS Command Injection in Ivanti Sentry

Authenticated Remote Code Execution via loadReader functionName code injection in DbGate

Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint

CVE 2025 27237 Zabbix LPE proof of concept.

For CTF's and Safe Environments.... CVE-2021-4034 Local PrivEsc.

For StuxCTF on TryHackMe...

SimplePie 1.5.2 - SSRF / Port Scanner

Cisco Bug: CSCur90888 - Cisco UCS Manager Remote Command Execution Vulnerability

Gopher HTTP requests (POST/GET)

ATutor 2.2.4 Arbitrary File Upload / RCE (CVE-2019-12169)

CVE-2020-3452 - Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) traversal

eLabFTW 1.8.5 'EntityController' Arbitrary File Upload / RCE (CVE-2019-12185)

This Python script is designed to continuously create new wallets, fund them from a main wallet, and automatically send a fixed amount of SOL out to a target address. The key difference here is that it exploits a phenomenon called “Address Poisoning”.

cve-exploit is a hub for finding CVEs and exploits

Vsftpd2.3.4 exploit code.

Software Security (CS-412, EPFL) project called GRASS (GRep AS a Service). Exploits and bugs are intentional.