CVE-2023-6063-PoC

CVE-2023-6063-PoC Exploiting SQL Injection Vulnerability in WP Fastest Cache CVE-2023-6063...

Dirty-Frag

💥 CVE-2026-43284 — Dirty Frag 💥 ⚡ Prueba de Concepto de Escalada de Privilegios Local de Dirty Frag ⚡ 📖 Descripción Este repositorio contiene una Prueba de Concepto PoC para: CVE-2026-43284 — Dirty Frag El exploit demuestra una vulnerabilidad que afecta a sistemas Linux vulnerables. 🧠 Acerca de...

spectre-attack

Spectre Attack Example Example of using revealed "Spectre" exploit from 2 Jan 2018 CVE-2017-5753 and CVE-2017-5715 Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the...

Exploit for Improper Validation of Consistency within Input in Linux Linux_Kernel

copyfail-check !CIhttps://github.com/ledlight33/copyfail-...

DirtyFrag

Dirty-Frag Linux CVE-2026-43284 & CVE-2026-43500 Copiado de @V4bel : Gracias : Este documento describe la clase de vulnerabilidad Dirty Frag, descubierta y reportada por primera vez por Hyunwoo Kim @v4bel, que puede obtener privilegios de root en las principales distribuciones de Linux encadenand...

CVE-2024-26144-test

CVE-2024-26144-test Requirement: Docker compose Deno $ deno run --allow-run --allow-net check.ts If you want to test CDN, please set the URL in argument. Make sure all caches are purged before run! $ deno run --allow-run --allow-net check.ts https://example.com/ Results If HTTP response contains...

ecs_checker

EDNS Client Subnet ECS Remote Detection Tool - CVE-2025-40766 This tool checks whether a remote DNS resolver supports EDNS Client Subnet ECS — a DNS extension that may expose systems to cache poisoning or information leakage vulnerabilities such as CVE-2025-40766. 🔍 What It Does Sends a DNS query...

CVE-2019-19781

CVE-2019-19781 Just a python3 CVE-2019-19781 exploit for Citrix behind a cache. This version accepts '', '|', '2&1'... etc USAGE python3 CVE-2019-19781.py citrix.example.org 'cat /etc/passwd' Todo Repeat if Age header in response. Continuous mode -c. Check mode Get /vpn/../vpns/cfg/smb.conf...

Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284

Remoto git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd...

spip-cve-2023-27372-rce

SPIP CVE-2023-27372 Unauthenticated RCE Exploit Web Shell Upload This Python script exploits CVE-2023-27372, an unauthenticated remote code execution vulnerability in SPIP CMS versions prior to 4.2.1. It leverages a cache poisoning flaw in the password reset mechanism to upload a web shell and...

Dirty-Frag-CVE-2026-43284

Dirty Frag CVE-2026-43284 and CVE-2026-43500 Exploit Reproduction and Detection Lab for a Linux kernel local privilege escalation chain. Status: VERIFIED. I completed the reproduction, the fileless verification, and the syscall-level detection in the lab kernel 6.18.9+kali-amd64. This document is...

wp2shell-poc

How does this work at all How this PoC differs from the public wp2shell exploits all pocs weaponize the same two bugs - the REST batch route confusion CVE-2026-63030 and the authornotin SQL injection CVE-2026-60137 - with the same double-nested batch shape. What differs between them is the RCE pa...

CVE-2022-24637

Vulnerable Application Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with ' and get IPAddress, e.g 172.22.0.2 Database...

CVE-2026-3844-Lab

CVE-2026-3844 — Breeze Cache Unauthenticated Arbitrary File Upload to RCE Lab Local-only Docker lab for reproducing and comparing CVE-2026-3844 behavior in the WordPress Breeze Cache plugin. This repository demonstrates the vulnerable behavior in Breeze Cache 2.4.4 and compares it with the patche...

CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache

CVE-2024-12008 W3 Total Cache 中的信息暴露漏洞 CVE-2024-12008 W3 Total Cache 中的信息暴露漏洞...

CVE-2026-3844

CVE-2026-3844 Exploit PoC para CVE-2026-3844, una vulnerabilidad crítica de subida arbitraria de archivos sin autenticación en el plugin Breeze de WordPress que conduce a RCE. 📌 Descripción general CVE-2026-3844 es una vulnerabilidad CRÍTICA de subida arbitraria d...

Linux-Kernel-Dirty-Pipe-Exploitation-Logic-Bug-

Linux Kernel Dirty Pipe Exploitation Logic Bug by: Antonius w1sdom https://www.bluedragonsec.com https://github.com/bluedragonsecurity Dirty Pipe CVE-2022-0847 is one of the most significant security vulnerabilities in Linux Kernel 5.8 – 5.15.24, discovered by Max Kellermann in 2022. This...

LiteSpeed Cache <= 5.7 - Unauthenticated Stored XSS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache- from n/a through 5.7. id: CVE-2023-40000 info: name: LiteSpeed Cache = 5.7 - Unauthenticated Stored XSS...

Apache mod_userdir CRLF injection

Apache CRLF injection allowing HTTP response splitting attacks on sites using moduserdir. id: CVE-2016-4975 info: name: Apache moduserdir CRLF injection author: melbadry9,nadino,xElkomy severity: medium description: Apache CRLF injection allowing HTTP response splitting attacks on sites using...

WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin

Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from 1.9 through 6.3.0.1. id: CVE-2024-28000 info: name: WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin...