CVES

Proof-of-concept exploits for known vulnerabilities:

Apache - Path traversal & RCE (CVE-2.4.49-2.4.50)
CMS Made Simple - SQL injection (v2.2.9)
Druva inSync - Privilege escalation (CVE-2020-5752)
Gibbon LMS - Authentication bypass (CVE-2023-45878)
HelpDeskZ - Arbitrary file upload RCE (v1.0.2)
HP Power Manager - Buffer overflow (CVE-2009-2585)
ImageMagick - Arbitrary file read (CVE-2023-34152)
Microsoft Outlook - Malicious email generator (CVE-2024-21413)
mRemoteNG - Credential decryption
nginx - Sudo privilege escalation
NSClient++ - Privilege escalation (v0.5.2.35)

Name		Name	Last commit message	Last commit date
parent directory ..
Apache-2.4.49-2.4.50.py		Apache-2.4.49-2.4.50.py
CVE-2025-32433.py		CVE-2025-32433.py
Druva inSync 6.6.3 & <6.5.0 (CVE-2020-5752).ps1		Druva inSync 6.6.3 & <6.5.0 (CVE-2020-5752).ps1
HP_Power_Manager_BOF(CVE-2009-2585).py		HP_Power_Manager_BOF(CVE-2009-2585).py
HelpDeskZ-1.0.2-ArbitraryFileUpload-RCE-EDB40300.py		HelpDeskZ-1.0.2-ArbitraryFileUpload-RCE-EDB40300.py
ImageMagick 6.9.6-4 (CVE-2023-34152)		ImageMagick 6.9.6-4 (CVE-2023-34152)
Jorani (CVE-2023-26469).py		Jorani (CVE-2023-26469).py
NSClient-0.5.2.35-Privilege-Escalation(EDB-46802).py		NSClient-0.5.2.35-Privilege-Escalation(EDB-46802).py
cmsms_2.2.9_sqli.py		cmsms_2.2.9_sqli.py
exp.so		exp.so
gibbon-lms v25 (CVE-2023-45878).py		gibbon-lms v25 (CVE-2023-45878).py
mRemoteNG.py		mRemoteNG.py
malicious email generator (CVE-2024-21413).py		malicious email generator (CVE-2024-21413).py
nginx_sudo_privesc.sh		nginx_sudo_privesc.sh
readme.md		readme.md

Provide feedback