CVE-2010-1240

CVE-2010-1240 - Embedding backdoor into a PDF ⚠️ For educational and authorized security research purposes only Description Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog,...

CVE-2024-0044

CVE-2024-0044/A-307532206 is a High severity vulnerability in the Android framework that allows attackers with adb access to run arbitrary code under the UID of arbitrary app. It was originally found by Tom Hebb from Meta Red Team X. You can found many articles on exploit this vulnerability on th...

jvmtiAgentLoad-Exploit

Arbitrary code execution via jvmtiAgentLoad Description: Tools and code for generating a malicious JAR to exploit jvmtiAgentLoad Usage: $ bash createjar.sh Usage: createjar.sh Supported TARGETOS options: linux|windows Linux Target The following command generates a JAR mal.jar that can be used on ...

CVE-2014-4377

CoreGraphics Memory Corruption - CVE-2014-4377 Apple CoreGraphics library fails to validate the input when parsing the colorspace specification of a PDF XObject resulting in a heap overflow condition. A small heap memory allocation can be overflowed with controlled data from the input in any...

CVE-2022-31491

CVE-2022-31491 Metasploit module and PoC files in this repo. Further Information Voltronic Viewpower/Pro and rebrands/derivatives The UPS management software normally allows a properly Authenticated and Authorized user using a web interface to configure the system to run a single OS command of th...

CVE-2025-70341

CVE-2025-70341: Insecure Permissions + Arbitrary Code Execution in App-Auto-Patch Summary App-Auto-Patch v3.4.2 creates its working directory with world-writable permissions chmod 777, enabling a local TOCTOU time-of-check-time-of-use race condition. An unprivileged local attacker can exploit thi...

CVE-2019-12594

CVE-2019-12594 This is a PoC for CVE-2019-12594, a vulnerability in DOSBox 0.74-2. Launching a calculator on the host from DosBox 0.74-2 The PoC for this vulnerability has been tested with the following configuration: DOSBox 0.74-2 Debian 10 amd64 Libc6 2.28-10...

CVE-2023-40031

CVE-2023-40031 Analysis and Reproduction of notepad++ Heap Buffer Overflow Vulnerability CVE-2023-40031 Vulnerability Overview Notepad++ is a well-known open-source code editor that runs on Windows and supports multiple programming languages. Recently, security researchers examined Notepad++ and...

EUVD-2026-112077

Joker is a small Clojure interpreter, linter and formatter written in Go. Prior to 1.8.2, joker --lint walks upward from the linted file to locate a .jokerd/ directory and executes matching linter. files before linting. Those files contain executable Joker/Clojure code, so linting a file inside a...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Command Injection Vulnerability CVE-2022-30525 POC&EXP author:160team.west9B For use only by authorized security researchers. Comply with cybersecurity laws. Any issues arising are your own responsibility, and the author bears no liability. 01-Introduction On May 12,...

CVE-2023-47268

PrusaSlicer Arbitrary Code Execution Priv Esc using a .3mf file with vulnerable prusaslicer version. Make sure you can run prusaslicer using sudo. Linux 1.Download the files 2.Change IP and PORT in exploit.sh 3.Make sure to have exploit.sh on /tmp directory 4.Execute the following command sudo...

CVE-2025-45778

CVE-2025-45778 CVE-2025-45778: Authenticated Stored XSS. An authenticated stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary JavaScript or HTML code via injecting a crafted payload into the "Description" text field when...

cve-2025-59489

Unity CVE-2025-59489 Vulnerability Detection Tool An automated detection tool for Unity Runtime injection vulnerabilities, specifically designed for Android game platforms. Vulnerability Overview CVE ID : CVE-2025-59489 CVSS Score : 8.4 High Affected Scope : Android applications built with Unity...

Pluck-CMS-Stored-XSS---Installation

Pluck CMS 4.7.18 Stored XSS Author: Sergio Description: Multiple Cross-Site Scripting XSS vulnerabilities in installation of PluckCMS v.4.7.18 allows a local attacker to execute arbitrary code via a crafted payload injected into the cont1 and cont2 parameters in the installation process- Website...

VertXploit

VertXploit Exploiting HID VertX and EDGE access control systems Summary VertXploit is a tool that can be used to exploit HID VertX and EDGE access control systems. A vulnerability exists within the discoveryd service, which fails to sanitize user data before executing system calls. This allows fo...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

CVE-2025-11953-PoC

Description The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and r...

CVE-2024-29988-exploit

CVE-2024-29988-exploit Exploit for Microsoft SmartScreen malicious execution april 2024 Description A critical vulnerability, CVE-2024-29988, has been discovered in Microsoft's April 2024 Patch Tuesday release. This vulnerability allows threat actors to bypass Microsoft's Mark of the Web MotW...

printix-CVE-2022-29554

CVE-2022-29554 Simple Release | Print Friendly A "Mishandling of Input to API" or "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability to...

Dnstracer-1.9-Fix

Dnstracer-1.9-Fix dnstracer dnstracer determines where a given Domain Name Server DNS gets its information from for a given hostname, and follows the chain of DNS servers back to the authoritative answer. Problem Stack-based buffer overflow in dnstracer through 1.9 allows attackers to execute...