Tools

shawarkhanethicalhacker/cve-2025-0133-exploit

Python script to detect CVE-2025-0133 reflected XSS vulnerability in Palo Alto VPN by probing the getconfig.esp endpoint and injecting XSS payloads.

nsflabs/cve-2020-5902

Python scanner to detect CVE-2020-5902 RCE vulnerability in F5 BIG-IP TMUI. Tests unauthenticated remote systems for arbitrary command execution via…

nxgn-kd01/react2shell-scanner

Detect CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Fast, accurate scanner with zero false positives.

lfillaz/cve-2024-2997

The tool helps in quickly identifying vulnerabilities by examining a comprehensive list of potential paths on a website, making it useful for…

huseyinstif/cve-2025-24016-nuclei-template

Nuclei template to detect CVE-2025-24016 unsafe deserialization RCE in Wazuh servers via a crafted JSON payload that triggers a NameError.

0xuho/cve-2024-2997

The tool helps in quickly identifying vulnerabilities by examining a comprehensive list of potential paths on a website, making it useful for…

sardine-web/cve-2024-36991

Path traversal vulnerability in Splunk Enterprise on Windows

p33d/cve-2024-23113

Python script to detect CVE-2024-23113, a format string vulnerability in FortiGate FGFM service on TCP/541, using SSL connection and crafted payload…

cbk914/cve-2022-30525_check

Python script to detect CVE-2022-30525 OS command injection vulnerability in Zyxel USG FLEX devices by sending crafted HTTP requests and analyzing…

rootharpy/cve-2025-25163-nuclei-template

This repository features a Nuclei template specifically designed to detect the Path Traversal vulnerability (CVE-2025-25163) in the Plugin A/B Image…

ashkan-pu/cve-cve-2025-25231

Nuclei template to detect CVE-2025-25231, a path traversal vulnerability in Omnissa Workspace ONE UEM, allowing access to sensitive files via crafted…

srcx404/cve-2024-39719

Python exploit script for CVE-2024-39719, a file existence disclosure vulnerability in Ollama. Tests API endpoints to detect server file paths,…

sagsooz/cve-2025-29927

🔐 Python-based smart scanner for CVE-2025-29927 — Next.js middleware authentication bypass vulnerability. Detects meta refresh, keyword-based…

amirqusairy99/wordpress-file-upload-4.24.11---unauthenticated-path-traversal

Python-based tool to detect and exploit arbitrary file read vulnerability in WordPress WP File Upload plugin (<=4.24.11), enabling unauthenticated…

dkstar11q/cve-2022-44877

Bash script to detect and exploit CVE-2022-44877 command injection vulnerability in CentOS Web Panel, supporting single URL scanning, exploitation,…

fransvanbuul/cve-2022-22965-susceptibility

Java-based tool to detect and test for CVE-2022-22965 (Spring4Shell) vulnerability in web applications, enabling security validation and exploitation…

diablohtb/nuclei-template-cve-2024-1561

Nuclei Templates