890335 matches found
CVE-2006-6184
CVE-2006-6184 This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflow in Allied Telesyn TFTP Server AT-TFTP 1.9, and possibly earlier, allowing remote attackers to cause a denial of service or execute arbitrary code. Quick Start 0. let...
mediacodecoob
mediacodecoob Infoleak and PC control poc for CVE-2015-6620 24445127, I'll add after conference...
CVE-2025-7775
CVE-2025-7775 Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server OR NetScaler ADC and NetScaler Gateway 13.1,...
Malicious code in @s4yhiitestpoc/r2-https-b (npm)
Source: amazon-inspector e89449bafb4f816bd8605f45cedf0fec8ec0cff9088007a7a38aaea0a9db91ec On npm install, postinstall.js automatically collects installer-side identifying data — hostname, username, home directory, non-internal network interface addresses, DNS servers, current working directory,...
CVE-2023-38545
CVE-2023-38545: Curl Vulnerability Proof of Concept This repository contains a Proof of Concept PoC designed to test systems for the CVE-2023-38545 vulnerability. The vulnerability affects the curl utility, specifically versions between 7.69.0 and 8.3.1, and is related to the handling of HTTP...
Minimus-Junior-Backend-Exercise
Junior Backend Exercise — dasel v3.3.1 Package dasel v3.3.1 with Melange, build a container image with apko, and fix CVE-2026-33320. Prerequisites: Docker. All build steps run inside containers — no local melange/apko install needed. Run all commands from the repo root on linux/amd64 or Docker...
PoW-Shield
Description PoW Shield provides DDoS protection on OSI application layer by acting as a proxy that utilizes proof of work between the backend service and the end user. This project aims to provide an alternative to general anti-DDoS methods such as Google's ReCaptcha that has always been a pain t...
TPLink-VN020-DoS
TPLink-VN020-DoS TPLink VN020-F3v Denial of Service CVE-2024-12342 Usage: python3 CVE-2024-12342.py 192.168.1.1 python3 CVE-2024-12342.py 192.168.1.1 -p 8080...
killcast
Manipulate Chromecast Devices in your Network Available in Inspiration - Thousands of Google Chromecast Devices Hijacked to Promote PewDiePie This tool is a Proof of Concept and is for Research Purposes Only, killcast shows how Chromecast devices can be easily manipulated and hijacked by anyone...
CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara
PoC for CVE-2017-16744 and CVE-2017-16748 Proof of Concept PoC CVE: 2017-16744 and 2017-16748 Date: 09/09/2019 Exploit Author: GainSec - Jon Gaines Vendor Homepage: https://www.tridium.com/ Version: Affects Tridium Niagara AX Versions: 3.8 and prior as well as Niagara 4 Versions: 4.4 and prior...
credssp
credssp This is a poc code for exploiting CVE-2018-0886. It should be used for educational purposes only. It relies on a fork of the rdpy projecthttps://github.com/preempt/rdpy, allowing also credssp relay. Written by Eyal Karni, Preempt [email protected] Build Instructions Linux If you are...
CVE-2021-22893
CVE-2021-22893 Proof-of-Concept PoC script to exploit Pulse Secure CVE-2021-22893. Usage Achieves RCE on Pulse Secure VPNs chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.sh -l ./exploit.sh -l IPList.txt...
xpc-string-leak
xpc-string-leak xpc-string-leak is a proof-of-concept exploit for an out-of-bounds memory read in libxpc. This exploit uses the vulnerability to read out-of-bounds heap memory from diagnosticd, an unsandboxed root process with the taskforpid-allow entitlement. The vulnerability: CVE-2018-4248 On...
snmpwn
SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...
CVE-2026-75650
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-75650 CVE-2026-75650 Magento Open Source 2.4.8-p5 - Adobe I am @abraxasnull. Loopback lab. The client is CVE-2026-75650-Abraxas-Labs.py. Unauthenticated email-template SSTI. A GraphQL Store header plants...
CVE-2026-21122
Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...
CVE-2026-21114
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...
My-PoC-Exploits
My-PoC-Exploits PoC exploits I wrote. They're as is and I will not offer support...
CVE-2026-21126
Improper input validation in the libsimba.heifdec.media.samsung.so component allows local attackers to write out-of-bounds memory. This vulnerability exists in versions prior to SMR Oct-2026 Release 1 . Exploitation of this flaw could lead to memory corruption. Remediation is available via the SM...
