faxhell

faxhell "Fax Shell" A Proof-of-Concept bind shell using the Fax service and a DLL hijack based on Ualapi.dll. See our writeup at: https://windows-internals.com/faxing-your-way-to-system/ How to use Build Ualapi.dll and place in c:\windows\system32 Start the Fax service, which will load the DLL an...

ThreadStackSpoofer

Thread Stack Spoofing / Call Stack Spoofing PoC A PoC implementation for an advanced in-memory evasion technique that spoofs Thread Call Stack. This technique allows to bypass thread-based memory examination rules and better hide shellcodes while in-process memory. Intro This is an example...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

CVE-2026-111169

La Suite Docs through 6.0.1 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access. Attackers who know a thread UUID can route a POST comment request through their own document's resourceid, inserting comments...

CVE-2026-111169

La Suite Docs through version 6.0.0 is affected by an authorization bypass vulnerability (CWE-639). This flaw allows authenticated users to insert comments into document threads they are not permitted to access. By knowing a specific thread UUID , an attacker can route a POST comment request usin...

CVE-2026-111169 La Suite Docs through 6.0.1 Authorization Bypass via Comment Thread Creation

La Suite Docs through 6.0.1 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access. Attackers who know a thread UUID can route a POST comment request through their own document's resourceid, inserting comments...

CVE-2026-35584

CVE-2026-35584 POC - CVE-2026-35584 FreeScout Description Summary The endpoint GET /thread/read/conversationid/threadid does not require authentication and does not validate whether the given threadid belongs to the given conversationid. This allows any unauthenticated attacker to: Mark any threa...

PSI_BOF

ProcessInspect BOF A CS BOF which can be used to inspect process memory, addresses and symbols! Overview of commands Command| Description ---|--- lm| list all loaded modules along with base address, entry point, and more addr| Print the bytes at a given memory address meminfo| Print information f...

CVE-2025-5287

Description: It is an exploit code that works for multiple urls and multi thread for Unauth Sql Injection on Wp plugin with CVE-2025-5287 Example usage: usage: CVE-2025-5287.py -h --file FILE --fudge FUDGE --timeout TIMEOUT --threads THREADS --proxy PROXY Time-Based SQLi Checker Clean, Threaded,...

libsafe-CVE-2005-1125

Libsafe only works on 32-bit architectures 1. make build: Builds Libsafe, compiles the proof of concept exploit 'thread', and compiles the library interposition code 'interpose.so'. make random MAXDELAY=x: Randomizes the interposed delays in 'interpose.so' with miximum delay MAXDELAY per...

CVE-2026-79830

A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution...

CVE-2026-79830

A stack buffer overflow vulnerability exists in the HPE NonStop Kernel Level Thread Model Lib (component T1132 ), which could allow an attacker to achieve arbitrary code execution . The vulnerability poses a risk of memory corruption , denial of service (DoS) , and stack overflow . HPE has releas...

EUVD-2026-102001

A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution...

CVE-2026-79830 HPE NonStop Kernel Level Thread Model Lib - Stack buffer overflow vulnerability

A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution...

CVE-2024-29824

I have made some optimizations to the scripts in horizon3ai actually, it is just adding a verification mechanism to ensure accuracy Original project address: https://github.com/horizon3ai/CVE-2024-29824 add "-f / --file" and ThreadPool...

WP-DOS-Exploit-CVE-2018-6389

WP-DOS-Exploit-CVE-2018-6389 This is a exploit of Wordpress DOS attack CVE 2018-6389. USE python3 wp-dosCVE-2018-6389.py domain threads Example python3 wp-dosCVE-2018-6389.py http://example.com 1000...

CVE-2026-102465

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x Redis client RESP parser pre-allocates arrays to a length declared by the server without enforcing an upper bound. A malicious or compromised Redis server, or an attacker in a man-in-the-middle...

vulns

vulnerability reports HN Security's advisories. https://hnsecurity.it/ Solaris HNS-2022-01-dtprintinfo. Multiple vulnerabilities in Solaris dtprintinfo and libXm/libXpm CVE-2022-46285, CVE-2023-24039, CVE-2023-24040. Zyxel HNS-2022-02-zyxel-zysh. Multiple vulnerabilities in Zyxel zysh...

CVE-2024-27348-HugeGraph-RCE

CVE-2024-27348: Apache HugeGraph RCE Advanced Sandbox Bypass An advanced, highly reliable Proof of Concept PoC exploit for CVE-2024-27348 Remote Code Execution in Apache HugeGraph Server. Unlike many public PoCs that execute commands blindly or fail on complex payloads due to Java's Runtime.exec...

CVE-2018-6389

doser.py DoS tool for HTTP requests inspired by hulk but has more functionalities written in Python: Examples 999 threads sends GET requests: python doser.py -t 999 -g 'https://targeted.site.com' 999 threads sends POST requests with json data: python doser.py -t 999 -p 'https://targeted.site.com'...