CVE-2021-30955-POC

CVE-2021-30955 POC Proof of concept wrapped into an iOS app for CVE-2021-30955 All credit to Jake James. His POC code used in this project can be found here. What is this? This demonstrates CVE-2021-30955, an iOS bug which allows an app in userspace to gain kernel-level permissions. In order to...

CVE-2026-24061

CVE-2026-24061 Vulnerability Batch Detection Tool ⚠️ Note : CVE-2026-24061 GNU Inetutils is a classic set of network tools provided by the GNU project, which includes the telnetd service, i.e., the Telnet server daemon. In versions 1.9.3 through 2.7, the telnetd service has a fatal flaw in the use...

portabilis-ieducar-user-type-privilege-escalation

Portabilis i-Educar = 2.1.13 Privilege Escalation Through Arbitrary Request to User Type Change Endpoint Proof of concept for exploitation of the vulnerability described in CVE-2025-11554, which concerns the possibility of a privilege escalation during arbitrary requests to user types endpoints i...

CVE-2026-26744

CVE-2026-26744 A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible via the /lostpwd endpoint. The application returns different error messages for valid and invalid usernames e.g., "The username you've inserted doesn't exist. Plea...

CVE-2021-4034

CVE-2021-4034 This is a POC for the vulnerability found in polkit's pkexec binary which is used to run programs as another users. For in-depth study: https://access.redhat.com/security/vulnerabilities/RHSB-2022-001 Run gcc poc.c -o poc && ./poc...

DirtyFrag-Detector

🔍 Dirty Frag — CVE-2026-43284 / CVE-2026-43500 Detection Script TL;DR: There are two new Linux kernel bugs. This script tells you if you're vulnerable. Patch your stuff. What's this about? On May 7th 2026, a vulnerability class called Dirty Frag was publicly disclosed by security researcher Hyunw...

CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script

CVE-2026-31431 — Copy Fail — Vulnerability Detection Script Detection only. A working PoC already exists at copy.fail/exploit. This script is for sysadmins and security teams determining where they are vulnerable — or still vulnerable after patching. What's this about? On April 29th 2026, a...

inetutils-telnetd-auth-bypass

inetutils-telnetd auth bypass lab, CVE-2026-24061 A small lab to play with the auth bypass in inetutils-telnetd 1.9.3 - 2.7 as disclosed on the oss-sec mailing list. 0 This container relies on the fact that inetutils-telnetd is still a vulnerable version in Debian 11 Bullseye. At the time of...

CVE-2026-39842

CVE-2026-39842: OpenRemote Expression Injection RCE in Rules Engine TL;DR Critical remote code execution vulnerability in OpenRemote's Rules Engine allows authenticated users with write:rules role to execute arbitrary code on the server with root privileges. CVSS Score : 10.0 Critical CVSS Vector...

-CVE-2021-4034

-CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt " "Polkit formerly PolicyKit is a component for controlling system-wide privileges in Unix-like operating systems. It provides an organized way for non-privileged processes to communicate with privileged ones. ... It is als...

CVE-2026-20841-PoC

CVE-2026-20841-PoC Proof of Concept for CVE-2026-20841 CVE-2026-20841 – Details CVE-2026-20841 is a vulnerability affecting Microsoft Notepad, where specially crafted input can trigger unintended command execution. The issue occurs due to improper handling of certain file content or execution...

CVE-2026-21509-PoC

CVE-2026-21509 — Educational Dummy PoC for Defender Visibility ⚠️ This repository provides a harmless, non-exploit Proof of Concept. Its purpose is to support defensive research , EDR/AV visibility testing , and training. It does not exploit CVE‑2026‑21509 and contains only dummy OLE artifacts. 📝...

CVE-2025-56132-Liquidfiles

CVE-2025-56132 - LiquidFiles User Enumeration POC Vulnerability Description This vulnerability was identified in LiquidFiles version 4.1 and below. When initiating a password reset via the “POST /passwordreset” endpoint, the application responds differently depending on whether the supplied email...

atril_cbt-inject-exploit

CVE-2023-44452, CVE-2023-51698: Linux Mint Xreader/MATE Atril CBT File Parsing Argument Injection Remote Code Execution Vulnerability A Critical One-Click RCE/Command Injection Vulnerability Affecting Popular Linux Operating Systems with MATE, Cinnamon, and some Xfce desktop Environments. Affecte...

CVE-2026-20805-POC

CVE-2026-20805 PoC Proof of concept for the information disclosure vulnerability in Microsoft's Desktop Window Manager dwm.exe. 📋 Vulnerability Summary ID: CVE-2026-20805 Product: Microsoft Windows Component: Desktop Window Manager dwm.exe CWE-ID: CWE-200 Exposure of Sensitive Information to an...

CVE-2026-31431

CVE-2026-31431 POC for CVE-2026-31431 Script The script is a small 10-lines POC that allows any user to become root on a machine...

Fortinet_FortiClient_Exploit_CVE-2026-24018

Fortinet FortiClient Exploit CVE-2026-24018 Fully Working Exploit for CVE-2026-24018: A UNIX symbolic link Symlink following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 leads to a local and unprivileged user to escalate their privileges to...

CVE-2025-46818

CVE-2025-46818 – Redis Lua Sandbox Cross-User Escape Sandbox escape via deprecated Lua APIs and mutable metatables on Redis 8.2.1. Overview Redis 8.2.1 keeps deprecated Lua builtins getfenv, setfenv, newproxy exposed to scripts and fails to lock metatables for basic types. An attacker can inject...

CVE-2024-6624

CVE-2024-6624 | JSON API User = 3.9.3 - Unauthenticated Privilege Escalation This is a Python script that exploits the CVE-2024-6624 vulnerability in the JSON API User = 3.9.3 plugin for WordPress. This tool allows unauthenticated attackers to register new users and escalate their privileges to...

ProxyLogon-CVE-2021-26855

CVE-2021-26855 This is a modified version of a POC for proxylogon. Instead of laucnhing "whoami" it creates a new user and adds that user to the administrator group and creates a reverse shell. The origonal POC code can be found here: https://www.exploit-db.com/exploits/49663 Usage: python...