E

exploit

Provides a C++ interface for accessing Actiontec routers over HTTP

ATutor 2.2.4 Arbitrary File Upload / RCE (CVE-2019-12169)

ATutor 2.2.4 'Backup' Remote Command Execution (CVE-2019-12170)

CVE-2020-3452 - Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) traversal

Cisco Bug: CSCur90888 - Cisco UCS Manager Remote Command Execution Vulnerability

Copy Fail - CVE-2026-31431 - Hardened C implementation for redteam and authorized penetration testing operations. ⚠️ Legal Notice: This tool is intended solely for authorized security research, authorized penetration testing, and defensive analysis. Use on systems you own or have explicit written permission to test. Unauthorized access to computer systems is illegal.

WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read

CVE 2025 27237 Zabbix LPE proof of concept.

Root-Level RCE via OS Command Injection in Ivanti Sentry

Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint

Authenticated Remote Code Execution via loadReader functionName code injection in DbGate

cve-exploit is a hub for finding CVEs and exploits

Old LunaLUA exploit PoC.

D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange.

For more information visit https://dheatattack.com

eLabFTW 1.8.5 'EntityController' Arbitrary File Upload / RCE (CVE-2019-12185)

Software Security (CS-412, EPFL) project called GRASS (GRep AS a Service). Exploits and bugs are intentional.

Gopher HTTP requests (POST/GET)

✉️💣 LetterBomb: A fork of the classic Wii hacking tool from fail0verflow

Linux Kernel Root Exploit Library.

TODO: A malicious SSH server that can trigger RCE on the libssh2 client side