CVE-2026-31431-Copy-Fail

CVE-2026-31431 Copy Fail Pre-compiled exploit for CVE-2026-31431 Copy Fail. Original source code from tgies/copy-fail-c, with i386 x8632 build target added. Vulnerability discovery and original PoC by theori-io/copy-fail-CVE-2026-31431. Canonical writeup: copy.fail. Build make glibc static build...

CVE-2017-5638

CVE-2017-5638 Table of Contents 1. Overview 2. Dependencies 3. Usage Overview This project is a prove-of-concept for the Apache Struts vulnerabilty. The goal was to create software that can generate and test random IPs for the vulnerabilty described above. Use this project on your own risk and fo...

Spring4Shell-POC

Spring4Shell PoC Application This is a dockerized application that is vulnerable to the Spring4Shell vulnerability CVE-2022-22965. Full Java source for the war is provided and modifiable, the war will get re-built whenever the docker image is built. The built WAR will then be loaded by Tomcat...

SharpSploitConsole

SharpSploitConsole Console Application designed to interact with SharpSploit released by @cobbrio https://github.com/cobbr/SharpSploit SharpSploit is a tool written by @cobbrio that combines many techniques/C code from the infosec community and combines it into one sweet DLL. It's awesome so chec...

RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111

Windows 11 RRAS Vulnerability Simulation Lab CVE-2026-25172, CVE-2026-25173, CVE-2026-26111 ⚠️ IMPORTANT – Educational & Defensive Use Only This guide is for setting up an isolated, controlled lab environment to understand integer overflow vulnerabilities in the Windows Routing and Remote Access...

rover

rover Proof of Concept code for CVE-2016-5696 Rover is a small python program to discover abitrary client source ports as shown in CVE-2016-569. Once the source port is known, the 4 tuple of information needed to confirm that two host are communicating can be completed. When run, rover establishe...

CVE-2022-21907

CVE-2022-21907 Description - POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. - create by antx at 2022-01-17. Detail - HTTP Protocol Stack Remote Code Execution Vulnerability. - Similar to https://github.com/antx-code/CVE-2021-31166CVE-2021-31166. - This problem...

CVE-2025-31486

CVE-2025-31486-PoC.py url image For details on vulnerability reproduction and specific environment setup, please refer to：https://chenchena.blog.csdn.net/article/details/147150357?spm=1001.2014.3001.5502...

CVE-2020-3161

CVE-2020-3161 Cisco IP Phone 11.7 - Denial of Service PoC...

openssl: heap buffer overflow in CMS key unwrapping

A flaw was found in OpenSSL. A crafted CMS Cryptographic Message Syntax message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMSdecrypt. This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap...

openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission

A flaw was found in OpenSSL. The Datagram Transport Layer Security DTLS retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to...

Important: Red Hat Security Advisory: jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission

A flaw was found in OpenSSL. The Datagram Transport Layer Security DTLS retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to...

CVE-2026-108985

The libnfs library (versions through 6.0.2 before commit 7613236) is vulnerable to an out-of-bounds write during ZDR decoding. The issue originates in lib/libnfs-zdr.c within the libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array() functions because the caller-supplied maxsize value is...

EUVD-2026-97165

ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfszdrbytes, libnfszdrstring, and libnfszdrarray. The caller-supplied maxsize value is not honored...

CVE-2021-21972-vCenter-6.5-7.0-RCE-POC

CVE-2021-21972-vCenter-6.5-7.0-RCE-POC poc Just verify the return status of someone's path POC For testing only, NO EXP module is added POC仅用于测试，未加入exp模块...

USN-8912-1: Perl DBI module vulnerabilities

Harsh Raj Singhania discovered that the Perl DBI module did not correctly validate certain attributes. An attacker could possibly use this issue to execute arbitrary code. CVE-2026-78030 Harsh Raj Singhania discovered that the Perl DBI module did not correctly handle certain string operations. An...

CVE-2024-57972

Authors Tânia Silva, António Pinto, Pedro Pinto and Sara Paiva Denial of Service on HoloLens via Device Portal functionalities A Denial of Service DoS attack aims to overload a target system in such a way that it gradually becomes unable to respond to all the requests sent to it. This way, a...

UAC-bypass

UAC-bypass Please note: It is a Proof of Concept and is not intended for illegal usage! Visit my website: https://winscripting.blog/ Please donate to this Bitcoin address if you find this PoC helpful: 12WN3fHmr5EB2Y5cDbKAgTDYMo5d1b1AUu alt text...

microsoft-cve-2021-1675

!IMPORTANT "This repo is now in 'Blue Screen' mode-archived and frozen in time!" Microsoft-CVE-2021-1675 I have created a small C project that exploits vulnerability CVE-2021-1675. For more information about CVE-2021-1675, please check my blog post:...