exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documentation, and more useful information for those interested. Statement This repo was incomplete when published. In regard to AI usage, my fuzzing workflow was automated by AI with a strict workflow. I used GPT-5.3 for ALL the fuzzing, a...

AllAboutBugBounty

All about bug bounty These are my bug bounty notes that I have gathered from various sources, you can contribute to this repository too! List Vulnerability Arbitrary File Upload CRLF Injection Cross Site Request Forgery CSRF Cross Site Scripting XSS Denial of Service DoS Exposed Source Code Host...

KubeArmor

KubeArmor is a cloud-native runtime security enforcement system that restricts the behavior such as process execution, file access, and networking operations of pods, containers, and nodes VMs at the system level. KubeArmor leverag...

CVE-2011-4107

This repository does not have a README...

nullmap

nullmap A very simple driver manual mapper based on my older voidmap and CVE-2023-21768 POC by chompie and b33f. Because the underlying IoRing post-exploitation memory r/w primitive is not handling many consequent reads and writes very well, I've decided to overwrite CR4 to disable SMEP/SMAP to...

CVE-2026-57223

windows: unquoted LocalSystem service ImagePath...

CVE-2024-38077

This repository does not have a README...

RootPipe-Demo

RootPipe-Demo This is a Proof-of-Concept Mac Application that demonstrates the RootPipe Privilege Escalation Vulnerability CVE-2015-1130 identified by Emil Kvarnhammar from TrueSec This demo was written in Objective-C, ported from the Python PoC here: RootPipe Usage To use, simply give a path to ...

cve-scores

CVE Scores EPSS & VEDAS Score Aggregator for CVEs Data Providers SCORE| MAINTAINER| PURPOSE| COVERAGE| ATTRIBUTION| FREQUENCY ---|---|---|---|---|--- Exploit Prediction Scoring System EPSS| Empirical Security| Prediction of Future Exploitation| 1 Identifier CVE| Proprietary Data sourced from Data...

Guide-and-theoretical-code-for-CVE-2023-35674

Guide-and-theoretical-code-for-CVE-2023-35674 Guide and theoretical code for CVE-2023-35674 Because android is out of my skill league please use this as a high overview from my pov on how i would exploit this cve. the code snippets are just skeletons , please help : So first of all u can't exploi...

CVE-2026-58264

creationtimestamp| type| source ---|---|--- 2026-09-18 20:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvsyk55em524 2026-09-18 22:08:10+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvt6lg7a5p2n...

CVE-2019-14287-CVE-2014-6271

This repository does not have a README...

CVE-2021-21972-vCenter-6.5-7.0-RCE-POC

CVE-2021-21972-vCenter-6.5-7.0-RCE-POC poc Just verify the return status of someone's path POC For testing only, NO EXP module is added POC仅用于测试，未加入exp模块...

CVE-2018-8172

CVE-2018-8172 Microsoft Visual Studio CVE-2018-8172 Remote Code Execution Vulnerability http://darkcert.com/2018/08/microsoft-visual-studio-remote-code-execution-cve-2018-8172/ https://twitter.com/SyFi2k...

CVE-2019-7304_DirtySock

This repository does not have a README...

ms15-034-Scan

ms15-034-scan python3 Batch scan for ms15-034/CVE-2015-1635 vulnerability Usage root@kitploit: python3 ms-socket.py url.txt Add assets to url.txt yourself Output to result.txt Did not remove http:// and https:// Replace manually in notepad using ctrl+h...

frameworks_native_AOSP10_r33_CVE-2023-21118

This repository does not have a README...

Samba-CVE-2007-2447-Exploit

Samba CVE-2007-2447 Exploit This is a Python script for exploiting CVE-2007-2447, a vulnerability known as 'Username' map script command execution in the Samba server. Description This exploit is developed to target Samba versions 3.x - 4.x. CVE-2007-2447 allows an attacker to execute arbitrary...

CVE-2025-46271-Reverse-Shell-PoC

CVE-2025-46271-Reverse-Shell-PoC Disclaimer This repository is for educational purposes only. The information provided here is intended to help developers understand the vulnerability and protect their systems. Do not use this exploit maliciously or without permission. Use of this PoC is at your...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...