Medium Severity
CVE-2021-44228
Published: Oct 25, 2026
434 standalone Python-3 (stdlib-only) CVE exploits, each live-validated end-to-end against real vulnerable software with a write-up and a real-run screenshot. 102 in the CISA KEV catalog.
<p align="center"><img src="banner.png" alt="Exploit Arsenal" width="100%"></p>
<h1 align="center">Exploit Arsenal</h1>
<p align="center">
<strong>384 standalone CVE exploits</strong> — each validated against <strong>real vulnerable software</strong>
and shipped with a write-up and a screenshot of a live run.<br>
Pure Python 3, zero dependencies. For authorized security testing and education only.
</p>
<p align="center">
<img src="https://img.shields.io/badge/CVEs-434-blue.svg" alt="434 CVEs">
<img src="https://img.shields.io/badge/CISA%20KEV-102-critical.svg" alt="91 in CISA KEV">
<img src="https://img.shields.io/badge/python-3.x-blue.svg" alt="Python 3">
<img src="https://img.shields.io/badge/dependencies-none%20(stdlib)-success.svg" alt="No dependencies">
<img src="https://img.shields.io/badge/validated-real%20targets-brightgreen.svg" alt="Validated on real targets">
<img src="https://img.shields.io/badge/license-MIT-green.svg" alt="MIT License">
</p>
<p align="center"><em>⭐ If this saved you time, a star helps others find it.</em></p>
---
## Why this repo is different
Most "CVE PoC" repos are copy-pasted snippets that were never run. **Every exploit here is validated
end-to-end against the genuinely vulnerable software** (pinned Docker images or built from source —
Log4Shell, Spring4Shell, Text4Shell, ActiveMQ, and more), and every folder includes a **screenshot of
the real run**.
- 🧰 **434 CVEs** across web apps, AI/ML platforms and the Linux kernel — **102 are in the CISA KEV catalog**.
- 🐍 **Single self-contained Python 3 script** per CVE — stdlib only, no `pip install`, no frameworks.
- 📋 **A clear write-up per CVE** — root cause, impact, usage, and vendor-recommended **mitigations**.
- 🔧 **A `setup_lab.py` per CVE** — spin up the real vulnerable target (Docker) to test against safely.
<p align="center"><img src="web-application/CVE-2021-44228/poc_screenshot.png" alt="Live exploit run (Log4Shell CVE-2021-44228)" width="760"></p>
#