CVE-2024-0044

CVE-2024-0044/A-307532206 is a High severity vulnerability in the Android framework that allows attackers with adb access to run arbitrary code under the UID of arbitrary app. It was originally found by Tom Hebb from Meta Red Team X. You can found many articles on exploit this vulnerability on th...

CVE-2025-55349

CVE-2025-55349 — pm2 Arbitrary Code Execution via postinstall Discoverer : Golden Ticket Labs Vendor : Unitech pm2 Date Assigned : August 20, 2025 MITRE Description An issue in the lib/API/Modules/NPM.js component of Unitech PM2 v5.4.2 allows arbitrary code execution by installing packages with...

CVE-2024-21534-poc

Vulnerability: CVE-2024-21534 Severity: Critical CVSS Score: 9.8 Description: The jsonpath-plus package versions = 10.0.7 is vulnerable to a Remote Code Execution RCE vulnerability that allows attackers to execute arbitrary code via Node.js's VM module. This vulnerability is caused by insufficien...

FreeRDP-Out-of-Bounds-Read-CVE-2024-32459-

FreeRDP-Out-of-Bounds-Read-CVE-2024-32459- The FreeRDP-Out-of-Bounds-Read-CVE-2024-32459 vulnerability is a security flaw discovered in FreeRDP, an open-source program used for implementing the Remote Desktop Protocol RDP This vulnerability arises from input processing weaknesses, allowing an...

CVE-2023-46818-python-exploit

CVE-2023-46818 exploit This is a python version of the original php script for the vulnerability affecting ispconfig 3.2.11 and previous versions. Original PHP source: https://packetstormsecurity.com/files/176126/ISPConfig-3.2.11-PHP-Code-Injection.html This proof-of-concept is intended for...

CVE-2026-82642

Readest is an open-source e-book reader built on Tauri . In versions prior to 0.11.16 , the EPUB HTML sanitizer (DOMPurify) in apps/readest-app/src/services/transformers/sanitizer.ts forbade only the [removed] tag. Because DOMPurify treats the srcdoc attribute on elements as an opaque string, a ...

asrockploit

arbitrary code execution with CVE-2020-15368...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 Cacti remoteagent.php Unauthenticated Command Injection. This script checks only the conditions of CVE-2022-46169. What is Cacti? Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. ...

CVE-2021-3064

CVE-2021-3064: Pan-OS Remote Buffer Overflow + HTTP Smuggling Exploit This exploit uses an HTTP Smuggling vuln to deliver a payload to an otherwise inaccessible endpoint on Pan-OS firewalls; the endpoint is vulnerable to an overflow that can be exploited to run arbitrary code as root on the...

CVE-2024-5246

Here’s a structured README.md for the NETGEAR ProSAFE Network Management System Remote Code Execution RCE vulnerability PoC: Proof of Concept PoC for Remote Code Execution in NETGEAR ProSAFE Network Management System This repository contains a Proof of Concept PoC script demonstrating a Remote Co...

CVE-2024-0582

RU GenIoURingExploit is a PoC exploit targeting a specific vulnerability in the Linux kernel CVE-2024-0582. The PoC leverages the iouring mechanism to gain unintended access and potentially escalate privileges by manipulating socket buffers and triggering certain kernel behaviors. Features Utiliz...

CVE-2024-29988-exploit

CVE-2024-29988-exploit Exploit for Microsoft SmartScreen malicious execution april 2024 Description A critical vulnerability, CVE-2024-29988, has been discovered in Microsoft's April 2024 Patch Tuesday release. This vulnerability allows threat actors to bypass Microsoft's Mark of the Web MotW...

POC-CVE-2025-24813

CVE-2025-24813 Apache Tomcat RCE PoC Proof of Concept PoC exploiting CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization whe...

spring-cloud-function-rce

Spring Cloud Function SPEL Expression Injection Vulnerability CVE-2022-22963 Spring framework provides a comprehensive programming and configuration model for modern Java-based enterprise applications on any type of deployment platform. The serverless framework in Spring Cloud, the RoutingFunctio...

IHxExec

IHxExec POC to execute arbitrary code on behalf of another user. U can read more about the technique here: https://cicada-8.medium.com/process-injection-is-dead-long-live-ihxhelppaneserver-af8f20431b5d https://www.youtube.com/watch?v=bK3ufqZxkxc Note the attached video:...

CVE-2024-21378

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🛡️ CVE-2024-21378...

androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

vulnerable-PDF

vulnerable-PDF = Salaries.pdf - develоpe mode: 08.10.2022 NOTE: This is only for testing and you can open just a calculator, the integrated program of Microsoft. = Or you can use the PDF file to download the calc.exe into a forbidden directory :D WARNING! Only for tests and education =...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...