cve-2021-21735-zte-zxhn-h168n-admin-compromise

CVE-2021-21735: ZTE ZXHN H168N Information Leak to Full Admin Compromise Technical case study and GitHub Pages-ready write-up for CVE-2021-21735 in the ZTE ZXHN H168N V3.5. This repository focuses on the firmware routing flaw behind the exposed wizard endpoints, the disclosure timeline, the scori...

CVE-2025-55182-PoC

CVE-2025-55182-PoC Poc for CVE-2025-55182 Usage: python3 poc.py -u http://target.com --cmd "" Legal Disclaimer This tool is provided for educational purposes and authorized security testing only. Usage of this tool for attacking targets without prior mutual consent is illegal. The developer assum...

CVE-2024-21338

This repository does not have a README...

H2-database-CVE-2022-23221

H2 Database RCE CVE-2022-23221 1. Summary Reference: https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2 is a relational database management system that provides the ability to directly compile and execute Java code within its SQL engine. The H2 driver parses the JDBC URL to establish a connection...

CVE-2026-39813

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

CVE-2024-27198-POC

CVE-2024-27198 – JetBrains TeamCity Authentication Bypass & RCE PoC Author: EynaExp Scope: Research / Defensive Validation / Authorized Testing Only Overview This repository contains a proof-of-concept mass scanner targeting JetBrains TeamCity instances affected by CVE-2024-27198 , an...

CVE-2025-59470-PostgreSQL-Command-Injection

Affected Software: PostgreSQL 15.x before 15.7, 16.x before 16.3. Vulnerability Type: Command injection in the pgbackup extension. Description: The pgbackup extension fails to properly sanitize user‑supplied parameters, allowing a backup operator to inject arbitrary commands that are executed as...

CVE-2026-7459

CVE-2026-7459 CVE-2026-7459 Simple History Missing Authorization Account Takeover Exploit...

CVE-2025-25257

CVE-2025-25257 Exploits for CVE-2025-25257 released by watchtowr and others I found on github did not work on my installations of fortiweb downloaded from the official vendor website. I ripped some of these exploit codes to make a poc capable to pop a reverse shell on my environment. IP address a...

CVE-2025-22457

PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...

VMware_ESXI_OpenSLP_PoCs

VMwareESXIOpenSLPPoCs CVE-2020-3992 & CVE-2019-5544 Tested on ESXI installed on VMware Workstation. If on real mechine, you may need to change the srvtype field service:VMwareInfrastructure...

WebLogic_CNVD_C2019_48814

7kbscan-WebLogicCNVDC201948814 WebLogic CNVD-C-201948814 CVE-2017-10271 Scan By 7kbstorm...

CVE-2022-36883

This repository does not have a README...

CVE-2026-37071

CVE-2026-37071 Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile function in Veno File Manager Project 4.4.9 allows an authenticated attacker with 'reanme' permission to take over the super administrator account via a specially crafted POST request to the affected...

zerologon

Zerologon test for SMB & RPC A python script based on SecuraBV script. Demonstrates that CVE-2020-1472 can be done via RPC/SMB, and not only over RPC/TCP. Additionaly, there is a random byte in the final client challange & client credential - to test against trivial IDS signatures. The RPC/SMB sc...

CVE-2023-6702

Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace CVE-2023-6702 Summary This vulnerability allowed a remote attacker to execute arbitrary code inside the Chrome renderer process. There was an insufficient type check in the async stack trace handling code. It leads to a type confusi...

bifrost

Bifrost \ /' | | | , | '| || , '/'\ /',| | | | || | | | , | | /' /'/\ Usage: ./bifrost -action dump | list | askhash | describe | asktgt | asktgs | s4u | ptt | remove For dump action: -source tickets | keytab for keytab, optional -path to specify a keytab for tickets, optional -name to specify a...

cve-2025-58360

GeoServer: CVE-2025-58360 Disclaimer The code and information contained within this repository is for educational and research purposes only. The owner of the repository takes no responsibility for anything you do with the code and/or information within this repository. Your actions are your own...

CVE-2018-18852

CERIO router Authenticated RCE backdoor vendor creds CVE-2018-18852 Python PoC hook-s3c github.com/hook-s3c, @hooks3c on twitter Working Python PoC for CVE-2018-18852, originally appearing on; https://github.com/hook-s3c/CVE-2018-18852 What's up CERIO Router models and variants of, DT300N, DT100G...

CVE-2025-6019

CVE-2025-6019 Proof of Concept PoC This repository contains a Proof of Concept PoC script for CVE-2025-6019 , a Local Privilege Escalation LPE vulnerability in libblockdev and udisks. The script creates an XFS filesystem image with an SUID bash binary and exploits the vulnerability to mount it...