RhinoSecurityLabs/CVEs external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

RhinoSecurityLabs/CVEs

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/RhinoSecurityLabs/CVEs)

Close

RhinoSecurityLabs / CVEsView on GitHubMore

• External links
• Readme badge

Proof-of-Concept exploits for CVEs found by the team at Rhino Security Labs

☆905Jun 4, 2025Updated last year

Alternatives and similar repositories for CVEs

Users that are interested in CVEs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• mpgn / CVE-2019-0192

  View on GitHub
  RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
  ☆208Mar 10, 2019Updated 7 years ago
• lufeirider / CVE-2019-2725

  View on GitHub
  CVE-2019-2725 命令回显
  ☆433May 8, 2023Updated 3 years ago
• jas502n / CNVD-C-2019-48814

  View on GitHub
  WebLogic wls9-async反序列化远程命令执行漏洞
  ☆239May 26, 2019Updated 7 years ago
• dr0op / WeblogicScan

  View on GitHub
  增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持
  ☆964Jun 16, 2024Updated 2 years ago
• c0ny1 / FastjsonExploit

  View on GitHub
  Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）
  ☆1,407Dec 16, 2022Updated 3 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• Ridter / redis-rce

  View on GitHub
  Redis 4.x/5.x RCE
  ☆979Nov 30, 2021Updated 4 years ago
• veracode-research / solr-injection

  View on GitHub
  Apache Solr Injection Research
  ☆580Jan 28, 2020Updated 6 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆256Jul 1, 2016Updated 10 years ago
• l3m0n / Bypass_Disable_functions_Shell

  View on GitHub
  一个各种方式突破Disable_functions达到命令执行的shell
  ☆1,192Oct 17, 2023Updated 2 years ago
• projectzeroindia / CVE-2019-11510

  View on GitHub
  Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
  ☆360Jan 11, 2020Updated 6 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 4 years ago
• pyn3rd / CVE-2018-3252

  View on GitHub
  CVE-2018-3252-PoC
  ☆73Dec 7, 2018Updated 7 years ago
• Yt1g3r / CVE-2019-3396_EXP

  View on GitHub
  CVE-2019-3396 confluence SSTI RCE
  ☆174Oct 1, 2020Updated 5 years ago
• pyn3rd / CVE-2019-0232

  View on GitHub
  Apache Tomcat Remote Code Execution on Windows
  ☆190Nov 27, 2019Updated 6 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• rabbitmask / WeblogicScan

  View on GitHub
  Weblogic一键漏洞检测工具，V1.5，更新时间：20200730
  ☆2,262May 22, 2023Updated 3 years ago
• 1120362990 / vulnerability-list

  View on GitHub
  在渗透测试中快速检测常见中间件、组件的高危漏洞。
  ☆724Mar 21, 2022Updated 4 years ago
• c0ny1 / chunked-coding-converter

  View on GitHub
  Burp suite 分块传输辅助插件
  ☆2,030Feb 23, 2022Updated 4 years ago
• joaomatosf / jexboss

  View on GitHub
  JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
  ☆2,521Jan 21, 2020Updated 6 years ago
• qazbnm456 / awesome-cve-poc

  View on GitHub
  ✍️ A curated list of CVE PoCs.
  ☆3,522Jan 4, 2022Updated 4 years ago
• timwhitez / crawlergo_x_XRAY

  View on GitHub
  360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能
  ☆1,183Nov 10, 2021Updated 4 years ago
• adamyordan / cve-2019-1003000-jenkins-rce-poc

  View on GitHub
  Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (…
  ☆316Apr 1, 2019Updated 7 years ago
• 0xn0ne / weblogicScanner

  View on GitHub
  weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-201…
  ☆2,073Nov 24, 2023Updated 2 years ago
• chompie1337 / SMBGhost_RCE_PoC

  View on GitHub
  ☆1,393Jul 2, 2020Updated 6 years ago
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• guimaizi / get_domain

  View on GitHub
  ☆402Feb 28, 2020Updated 6 years ago
• r0eXpeR / redteam_vul

  View on GitHub
  红队作战中比较常遇到的一些重点系统漏洞整理。
  ☆2,520Jul 17, 2021Updated 5 years ago
• zhzyker / exphub

  View on GitHub
  Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、…
  ☆4,292Apr 4, 2021Updated 5 years ago
• opensec-cn / vtest

  View on GitHub
  用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。
  ☆867Jul 21, 2019Updated 7 years ago
• mpgn / CVE-2019-7238

  View on GitHub
  🐱‍💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱‍💻
  ☆154Feb 25, 2019Updated 7 years ago
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,008Oct 15, 2020Updated 5 years ago
• cujanovic / SSRF-Testing

  View on GitHub
  SSRF (Server Side Request Forgery) testing resources
  ☆2,505Oct 12, 2024Updated last year
• orangetw / awesome-jenkins-rce-2019

  View on GitHub
  There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
  ☆610May 17, 2019Updated 7 years ago
• jas502n / cve-2019-2618

  View on GitHub
  Weblogic Upload Vuln(Need username password)-CVE-2019-2618
  ☆173Apr 17, 2019Updated 7 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• knownsec / pocsuite3

  View on GitHub
  pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
  ☆3,874Feb 28, 2025Updated last year
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,020May 21, 2024Updated 2 years ago
• cbwang505 / CVE-2020-1066-EXP

  View on GitHub
  CVE-2020-1066-EXP支持Windows 7和Windows Server 2008 R2操作系统
  ☆186Jun 17, 2020Updated 6 years ago
• Lucifer1993 / struts-scan

  View on GitHub
  Python2编写的struts2漏洞全版本检测和利用工具
  ☆1,412May 7, 2019Updated 7 years ago
• Y4er / CVE-2020-2551

  View on GitHub
  Weblogic IIOP CVE-2020-2551
  ☆336Apr 7, 2020Updated 6 years ago
• GrrrDog / Java-Deserialization-Cheat-Sheet

  View on GitHub
  The cheat sheet about Java Deserialization vulnerabilities
  ☆3,179May 26, 2023Updated 3 years ago
• airman604 / jdbc-backdoor

  View on GitHub
  A fake JDBC driver that allows OS command execution.
  ☆125Oct 2, 2022Updated 3 years ago