CVE-2021-44228_IoCs

CVE-2021-44228IoCs Public IoCs for log4j framework vulnerability CVE-2021-44228 log4shell based on multiple public sources...

CVE-2016-0051

CVE-2016-0051 Proof-of-concept BSoD Blue Screen of Death and Elevation of Privilege to SYSTEM code for my CVE-2016-0051 MS-016. EoP to SYSTEM on Windows 7 SP1 x86 BSoD on a Windows 10 x64 Links Microsoft Security Bulletin MS16-016 Microsoft Acknowledgements page A variant of this PoC where the...

CVE-2018-6574-POC

CVE-2018-6574-POC...

CVE-2018-4407

CVE-2018-4407 CVE-2018-4407 is a buffer overflow vulnerability in the XNU kernel's ICMP error code. It causes IOS devices to crash both laptops and mobiles upon receival of one yes 1! single bad packet. The bug was originally disclosured by Kevin Backhouse on his lgtm blogpost on October 30th 201...

CVE-2024-26475

CVE-2024-26475 Authors Sherlock Fang, Vlad Tronciu, Ayam Babu Description An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grubsfsreadextent function. Attack Vectors Crafting a payload to cause “treeblock =...

log4j-shell-poc

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability. Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others. In this repository we have made and example...

CVE-2022-46169-Cacti-1.2.22

CVE-2022-46169 This exploit is a modified version from the original script by @FredBrave and adapted by @arthurcortesr and @alv-david. Usage/Examples python3 CVE-2022-46169.py -u http://XX.XX.XX.XX --LHOST XX.XX.XX.XX --LPORT XXXX --host-id X --local-id X Expected results Testing hostid=X,...

CVE-2025-24893-RCE-PoC

Infos This PoC first tests for the SSTI and if it works. It will go in loop and allows you to run commands remotly. The exec and shell command do the same currently. Installation python3 -m pip install requirements.txt Usage Connecting python3 poc.py Example With debug set to False default python...

QuarkPoC

QuarkPoC iOS Application w/Implementation of CVE-2024-27804...

poc-cve-2019-5736

PoC-CVE-2019-5736 PoC for CVE-2019-5736...

cve-2014-0050

cve-2014-0050 CVE-2014-0050 Vulnerable site sample This project aims to demonstrate the CVE-2014-0050 exploitation for educational purpose. For more informations, see : https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2014-0050--Exploit-with-Boundaries,-Loops-without-Boundaries/...

CVE-2024-12381-PoC

This repository does not have a README...

logrus-dos-poc

CVE-2025-65637: Logrus Denial of Service Vulnerability This directory contains proof-of-concept code and test scripts for the Denial of Service DoS vulnerability in github.com/sirupsen/logrus, assigned as CVE-2025-65637. Vulnerability Summary CVE ID : CVE-2025-65637 CWE : CWE-400 Uncontrolled...

CVE-2026-66086

A stack-based buffer overflow exists in the modem OTA stack due to improper validation of scheduling information within SIB1 messages . This vulnerability could allow an attacker to achieve remote code execution or cause a denial of service without requiring additional execution privileges. No sp...

EUVD-2026-97142

In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed...

CVE-2026-87765

The kernel apsys DVFS driver is vulnerable to an out-of-bounds read or hardware register corruption . This issue stems from improper input validation of the frequency index. An attacker with local privileges could exploit this vulnerability to cause system instability or a denial of service . No ...

EUVD-2026-97140

In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges...

Am-I-affected-by-Meltdown

Am I affected by Meltdown?! Meltdown CVE-2017-5754 checker What am I? Proof-of-concept / Exploit / Checks whether system is affected by Variant 3: rogue data cache load CVE-2017-5754, a.k.a MELTDOWN. The basic idea is that user will know whether or not the running system is properly patched with...

tf-log4j-aws-poc

Readme Project Description This project files demostrate a proof-of-concept of log4j vulnerability CVE-2021-44228 on AWS using Terraform Infrastructure-as-a-code means. There are 2 demo in this project: 1. single-instance contains a vulnerable server, you can use your personal computer to exploit...

Wordpress-DOS-Attack-CVE-2018-6389

Wordpress-DOS-Attack-CVE-2018-6389 Load-scripts.php file, which purpose is to retrieve several JavaScript packages through one single request. $ chmod +x Execute.sh $ ./Execute.sh How it Works! The problem lies upon the load-scripts.php file, which purpose is to retrieve several Javascript packag...