902983 matches found
CVE-2017-16995
CVE-2017-16995 CVE ID: CVE-2017-16995 Publish date: 2017-12-27T17:08:17.670 Base score CVSS 3.0/3.1: 7.8 Description: The checkaluop function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service memory corruption or possibly have unspecified oth...
PoC-CVE-2026-9198
Description Proof of concept exploit code for CVE-2026-9198 Exploit-DB entry: https://www.exploit-db.com/exploits/52675 Usage python3 poc.py -u -c...
CVE-2022-46364-Proof-of-the-concept
CVE-2022-46364: Apache CXF MTOM XOP:Include SSRF to LFI Exploit ⚠️ DISCLAIMER THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY This proof-of-concept exploit is provided for educational purposes to help security professionals understand the vulnerability and protect their systems...
CVE-2025-0411-7-Zip-Mark-of-the-Web-Bypass
CVE-2025-0411-7-Zip-Mark-of-the-Web-Bypass This repository is about CVE-2025-0411 7-Zip Mark-of-the-Web Bypass vulnerability...
CVE-2025-4611-PoC
PoC for CVE-2025-4611 https://an4ss-organization.gitbook.io/anas-almizani-blogs/research/cve-2025-4611...
CVE-2026-66752-HTTP-Request-Smuggling-via-Unparsed-Transfer-Encoding-Values-tiny_http-
Security Advisory: HTTP Request Smuggling via Unparsed Transfer-Encoding Values tinyhttp Assigned CVE ID: CVE-2026-66752 Summary tinyhttp checks only whether a Transfer-Encoding header is present. It never looks at the value. Any value, including codings that are not chunked and coding lists whos...
CrushFTP-cve-2024-4040-poc
CrushFTP-cve-2024-4040-poc...
astDoS
astDoS Tool to exploit CVE-2018-7284 and CVE-2018-19278 Usage This tool is used as a command. astDoS.py -h -a 1,2 -sA SERVERIP -sP SERVERPORT -u USER -p PASSWD -sub SUBUSER -dA DNSIP -dP DNSPORT -v VERSION DoS attack against Astersisk, CVE-2018-7284 and CVE-2018-19278 optional arguments: -h, --he...
BIG-IP-F5-TMUI-RCE-Vulnerability
BIG-IP-F5-TMUI-RCE-Vulnerability CVE-2020-5902 BIG IP F5 TMUI RCE Vulnerability RCE PoC/ Test Script...
CVE-2025-54123
CVE-2025-54123 Hoverfly Command Injection to RCE PoC Overview This repository contains a Python proof-of-concept PoC script for interacting with Hoverfly instances affected by CVE-2025-54123. The script supports: Authentication using username/password credentials Authentication using an existing...
CVE-2026-64849-PoC
CVE-2026-64849-PoC To Get This PoC - Join https://t.me/thecodeb0ss...
axios-CVE-2025-27152-PoC
This repository does not have a README...
better-poc-for-CVE-2018-15133
Better PoC for CVE-2018-15133 An automated PoC for CVE 2018-15133 All credits goes to kozmic who made the original PoC of CVE 2018-15133 This is just an automation script i made while doing some lab box having this vulnerability because i didnt want to make a new deserialized object with phpggc...
CVE-2017-7529-POC
CVE-2017-7529-POC POC for CVE-2017-7529...
CVE-2026-111766
markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur inside a paragraph, attacker-controlled Markdown containing repeated unterminated inline HTML comments, processing instructions, declarations, or CDATA...
CVE-2026-111766
markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur inside a paragraph, attacker-controlled Markdown containing repeated unterminated inline HTML comments, processing instructions, declarations, or CDATA...
CVE-2026-111766
The markdown-it Markdown parser is vulnerable to a quadratic-time denial of service (DoS) in versions prior to 14.3.3 and 15.0.3 . When the html option or commonmark preset is enabled, processing attacker-controlled Markdown containing repeated unterminated inline HTML comments, processing instru...
CVE-2026-111766 markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled
markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur inside a paragraph, attacker-controlled Markdown containing repeated unterminated inline HTML comments, processing instructions, declarations, or CDATA...