CVE-2022-24934

CVE-2022-24934 CVE-2022-24934...

Get-log4j-Windows.ps1

Get-log4j-Windows.ps1 Identify all log4j components across all windows servers, entire domain, can be multi domain. CVE-2021-44228 Will scale to 1,000+ windows servers, 250+ servers at a time. 1k servers took about 1 1/2 hours. Apache log4j CVE-2021-44228 Single Server Version: Single Server...

log4j-spring-vuln-poc

log4j Spring vulnerable POC This is a POC for a simple spring boot start backend with maven including vulnerable log4j version for CVE-2021-44228 Spring boot bootstrapped with https://start.spring.io. commands ./mvnw spring-boot:run: start server ./mvnw dependency:tree: print dependency tree and...

CVE-2019-5420-RCE

This repository does not have a README...

CVE-2018-0114

This repository does not have a README...

log4j-payload-generator

log4j-payload-generator log4j-paylaod generator : A generic payload generator for Apache log4j RCE CVE-2021-44228. Deployment To deploy this project run root@kitploit: sudo git clone https://github.com/yesspider-hacker/log4j-payload-generator.git Running Tests To run tests, run the following...

CVE-2022-30190-POC

CVE-2022-30190-POC...

CVE-2018-20434

This repository does not have a README...

NetSec-CVE-2023-4357

Network Security Project — CVE-2023-4357 Overview This project is a final project for a Network Security course. The project focuses on CVE-2023-4357, a vulnerability affecting Google Chrome versions prior to 116.0.5845.96. The vulnerability is related to the handling of XML/XSLT and can allow a...

ProxyShell_POC

ProxyShellPOC POC for scanning ProxyShellCVE-2021-34523,CVE-2021-34473,CVE-2021-31207 usage: python3 Proxyshell.py ip...

Dirty-Pipe-Exploit

Dirty-Pipe-Exploit The Dirty Pipe exploit CVE-2022-0847 is a Linux kernel vulnerability v5.8+ allowing unprivileged attackers to overwrite arbitrary files via a flaw in the pipe mechanism. This leads to privilege escalation, granting root access. Similar to Dirty Cow but easier to exploit. Fix:...

CVE-2022-4262

Exploit for CVE-2022-4262 Official Chromium bug report. Shoutout to @clem1 for finding the ITW exploit. Shoutout to @5aelo for his RCA on the bug. Shoutout to @bjrjk for his super indepth RCA on the bug. Shoutout to @alisaesage for her video on the bug...

cve-2022-41032

This repository does not have a README...

porfolio-Baron-Samedit

porfolio-Baron-Samedit this is a study about CVE-2021-3156: Heap-Based Buffer Overflow in Sudo Baron Samedit...

CVE-2022-26485

CVE-2022-26485 Tested against Firefox 78.0 Windows https://ftp.mozilla.org/pub/firefox/releases/78.0/win64/en-US/Firefox%20Setup%2078.0.exe...

CVE-2022-1802

CVE-2022-1802 + CVE-2022-1529 + CVE-2022-2200 Tested against Firefox 100.0.1 Windows https://ftp.mozilla.org/pub/firefox/releases/100.0.1/win64/en-US/Firefox%20Setup%20100.0.1.exe...

nice-cve-poc

Nice CVE PoCs A collection of interesting CVE PoCs CVE-2023-44487 - HTTP/2 Rapid Reset Attack...

CVE-2026-81388

CVE-2026-81388 is a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The attack requires user interaction (e.g., opening a crafted file) and no prior privileges. The CVSS 3.1 score is 7.8 (HIGH) , with high impact to confidentiali...

cve-2023-34035-mitigations

This repo is a set of samples to demonstrate the arrangements wherein applications may be vulnerable to https://spring.io/security/cve-2023-34035CVE-2023-34035. An application is vulnerable when all of the following are true: Spring MVC is on the classpath DispatcherServlet and at least one other...

CVE-2021-21123-PoC-Google-Chrome

📝 Description Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski Total Bug Bounty Reward: $5.000 This is Proof of Concept for: Google SecuritySeverity CVE HIGH CVE-2021-21123 MEDIUM CVE-2021-21129 MEDIUM CVE-2021-21130 MEDIUM CVE-2021-21131 MEDIUM CVE-2021-2117...