Proof-of-Concept files for vulnerabilities found by Codean Labs
☆30Oct 8, 2026Updated 3 weeks ago
Alternatives and similar repositories for pocs
Users that are interested in pocs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Publishing advisories for CVEs found by POST Cyberforce☆13Jan 7, 2025Updated last year
- PDF.js是由Mozilla维护的基于JavaScript的PDF查看器。此漏洞允许攻击者在打开恶意 PDF 文件后立即执行任意 JavaScript 代码。这会影响所有 Firefox 用户 （<126），因为 Firefox 使用 PDF.js 来显示 PDF 文件，…☆12Jun 13, 2024Updated 2 years ago
- Exploit for CVE-2026-33725 - Remote Code Execution and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import☆25Apr 23, 2026Updated 6 months ago
- ☆13Sep 13, 2023Updated 3 years ago
- ☆16Jun 14, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Cleo Unrestricted file upload and download PoC (CVE-2024-50623)☆25Dec 11, 2024Updated last year
- Proof of Concept for CVE-2026-23745: Arbitrary File Overwrite vulnerability in node-tar (versions < 7.5.3).☆23Jan 17, 2026Updated 9 months ago
- QNAP N-Day (Probably not CVE-2020-2509)☆14Jul 27, 2022Updated 4 years ago
- CVE-2024-40725 and CVE-2024-40898, affecting Apache HTTP Server versions 2.4.0 through 2.4.61. These flaws pose significant risks to web …☆87Jul 19, 2024Updated 2 years ago
- CVE-2024-40431+CVE-2022-25479 chain for EOP(DATA ONLY ATTACK)☆46Oct 16, 2024Updated 2 years ago
- ☆17Jan 6, 2025Updated last year
- VolcengineAKSK☆20May 25, 2026Updated 5 months ago
- Exploit for CVE-2025-30406☆12Apr 24, 2025Updated last year
- ☠️ Code for the Hackfest Workshop☆10Oct 12, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- POC pre-auth RCE on Exchange☆191Aug 22, 2026Updated 2 months ago
- EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization.☆70May 11, 2026Updated 5 months ago
- CVE-2026-1357 — WPvivid Backup & Migration ≤ 0.9.123 Unauthenticated RCE Exploit☆17Feb 26, 2026Updated 8 months ago
- A Mobicore Trustlet/Driver Binary Loader for Ghidra☆13Jul 10, 2019Updated 7 years ago
- ☆37Jan 4, 2026Updated 9 months ago
- burpsuite插件-被动无感识别指纹-主动poc扫描☆26Sep 13, 2024Updated 2 years ago
- Exploit code for CVE-2023-42914 / pwn2own Vancouver 2023☆16Nov 22, 2024Updated last year
- Infinite loop of Override by Teto in html with css animations☆14Jul 25, 2026Updated 3 months ago
- This is an advanced ASMI bypass that is currently undetected by Windows Defender and all the Antivirus software's on virustotal.☆28Jun 10, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to…☆13Sep 23, 2026Updated last month
- Shared library implementations that transform the containing process into a shell when loaded (useful for privilege escalation, argument …☆27Feb 15, 2024Updated 2 years ago
- ☆22Jul 15, 2023Updated 3 years ago
- Arbitrary File Delete in Windows Installer before 10.0.19045.2193☆30Nov 6, 2022Updated 3 years ago
- CVE-2023-21823 PoC☆14Apr 20, 2023Updated 3 years ago
- AndroidSlicer is a dynamic slicing tool, useful for a variety of tasks, from testing to debugging to security.☆14Jul 28, 2019Updated 7 years ago
- CVE-2026-8452 PreAuth RCE☆65Aug 14, 2026Updated 2 months ago
- This is a proof of concept for CVE-2024-20356, a Command Injection vulnerability in Cisco's CIMC.☆54Apr 18, 2024Updated 2 years ago
- UAC bypass abusing WinSxS in "wusa.exe". Referred from and similar to: https://github.com/L3cr0f/DccwBypassUAC , Kudos to L3cr0f and Fuz…☆31Jun 30, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 收集ctf题目☆24Dec 10, 2022Updated 3 years ago
- CVE-2023-6063 (WP Fastest Cache < 1.2.2 - UnAuth SQL Injection)☆29Nov 15, 2023Updated 2 years ago
- ☆95Aug 26, 2025Updated last year
- gRPC / gRPC-Web Pentest Practicing Lab☆10Aug 29, 2023Updated 3 years ago
- Alternative Mimikatz LSASS DUMPER☆14Apr 2, 2020Updated 6 years ago
- ☆12Dec 30, 2024Updated last year
- Proof of Concept for Path Traversal in Apache Struts ("CVE-2023-50164")☆57Dec 18, 2023Updated 2 years ago