Oracle Fusion - Directory Traversal/Local File Inclusion

Oracle Business Intelligence Enterprise Edition 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0 are vulnerable to local file inclusion vulnerabilities via "getPreviewImage." id: CVE-2020-14864 info: name: Oracle Fusion - Directory Traversal/Local File Inclusion author: Ivo Palazzolo @palaziv severity: high...

Apache Struts2 S2-008 RCE

The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method. id: CVE-2012-0392 info: name: Apache...

CVE-2015-5531

CVE-2015-5531...

NETGEAR WNAP320 Access Point Firmware - Remote Command Injection

NETGEAR WNAP320 Access Point Firmware version 2.0.3 could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2016-1555 info: name: NETGEAR WNAP320 Access Point Firmware - Remote Command Injection author: gy741 severity: critical...

CentOS7_CVE-2021-3712_Remediation

:toc: :toclevels: 4 == Problem Customer has old CentOS7 box which is EOL CentOS7 is running older openssl which is affected by link:https://nvd.nist.gov/vuln/detail/cve-2021-3712cve-2021-3712 How openssl on old Centos7 should be patched for CVE? == Steps 1...

poc_CVE-2025-1716

pocCVE-2025-1716...

CVE-2020-27194

CVE-2020-27194 my exp for CVE-2020-27194, tested on linux kernel 5.8.14. More details : https://ama2in9.top/2020/12/14/CVE-2020-27194/ reference CVE-2020-8835 pwn2own 2020 ebpf 提权漏洞分析 CVE-2020-8835 pwn2own 2020 ebpf 通过任意读写提权分析...

derpyc0w

Disclaimer I am not responsible for anything you do with this code. This code comes with no warranty. Description Exploit for CVE-2016-5195 which maps a readonly SUID executable to memory readonly and uses the race condition to overwrite it with an ELF of our choice. Payloads are available in NAS...

Exploit_Sync_Breeze_v10.0.28_CVE-2017-14980

ExploitSyncBreezev10.0.28CVE-2017-14980...

exploit-CVE-2007-2447

exploit-CVE-2007-2447 Exploit for the vulnerability CVE-2007-2447 Created by: @xlcc4096 @CapitanJ4ck21 @CapitanJ4ck21 - https://github.com/Th3FirstAvenger...

CVE-2023-0386

Compilation root@kitploit: make all Usage Start two terminals, in the first terminal enter root@kitploit: ./fuse ./ovlcap/lower ./gc In the second terminal enter root@kitploit: ./exp Effect Privilege escalation effect Effect demonstration...

secure-boot-cert-servicing

Secure Boot Certificate Rollover — assessment and servicing A single, self-contained PowerShell script that assesses a Windows machine's Secure Boot certificate posture for the 2011 → 2023 rollover CVE-2023-24932 / KB5025885 and, only when you explicitly ask it to, opts that machine in to the...

HeartBleed-CVE-2014-0160--SCRIPTS-python3

This repository does not have a README...

ShieldBreak

ShieldBreak - Windows Defender 0day vulnerability Microsoft has failed to properly patch the RoguePlanet vulnerability CVE-2026-50656, this PoC demonstrates a full patch bypass. The PoC was tested in the latest version of windows 11 25h2 +Canary channel and windows server 2025, the PoC also have ...

CVE-2020-1938

This repository does not have a README...

CVE-2024-40275_Scanner

CVE-2024-40725 Scanner A Python-based detection tool for CVE-2024-40725 , an Apache HTTP Server source code disclosure vulnerability affecting versions 2.4.0 and 2.4.61. Legal notice: Only run this scanner against servers you own or have explicit written authorization to test. Unauthorized use ma...

CVE-2026-76801

creationtimestamp| type| source ---|---|--- 2026-09-09 02:46:58+00:00| seen| https://bsky.app/profile/suriq.io/post/3mv2jipzoo52g 2026-09-09 08:11:50+00:00| seen| https://gist.github.com/ichintu/8de1b393c7903e975b41e200e6613355...

WSUSResponder

🧰 WSUSResponder Version: 1.0.1 Author: RZA / IT Operations License:MIT 🎯 Objective The WSUSResponder module provides a set of PowerShell tools to quickly respond to the critical vulnerability CVE-2025-59287 , a remote code execution RCE flaw affecting Windows Server Update Services WSUS. It allow...

CVE-2026-44578

CVE-2026-44578 — Next.js WebSocket Upgrade Handler SSRF Lab Security Academy CERT Project vulnerability reproduction lab environment for mentor demos Overview...

spd_dump-macos

spddump for macOS English | 简体中文 macOS port of the UNISOC Spreadtrum BootROM/FDL flashing toolchain. Based on ilyakurdyukov/spreadtrumflash MIT, with execaddr2 — the CVE-2022-38694 signature-verification bypass of the closed-source spddump — reimplemented, completing the full chain on macOS arm64...