spring4shell-poc

Spring4Shell POC Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run...

CVE-2023-4863-

CVE-2023-4863 Triggering the famous libweb 0day vuln with libfuzzer...

drupalhunter

drupalhunter CVE-2018-7600 0-Day Exploit cyber-warrior.org...

CVE-2023-4863

CVE-2023-4863/CVE-2023-41064 A POC for CVE-2023-4863. NOT an exploit Shout to @benhawkes who discovered the right set of codelengths to trigger this vulnerability! Please consult Ben's blog post for more information! https://blog.isosceles.com/the-webp-0day/...

ZDI-CAN-16857

Exploit for CVE-2023-32163 ZDI-CAN-16857 0-day Here you can read my report 📜 Here you can buy me a unicorn 🦄 Share the Knowledge!...

scan

Atomdrift Scan Atomdrift Scan is a modern ML-based malware scanner designed to detect 0-day attacks against the software supply-chain. It's designed to be deterministic, fast, and flexible, and embeddable in any workflow or security tool you have in mind, and can operate against files, archives,...

nginx-rce-cve-2026-42945

5. CVE-2026-42945 - Critical NGINX RCE CVSS 9.2 Classification Category: 0-Day / Remote Code Execution CVE: CVE-2026-42945 CVSS: 9.2 Critical Date Discovered: May 12, 2026 Date Patched: May 2026 F5 quarterly security release Source: GitHub DepthFirstDisclosures/Nginx-Rift Vulnerability Details A...

Event-ID-217-Rule-Name-SOC254-Apache-OFBiz-Auth-Bypass-and-Code-Injection-0Day-CVE-2023-51467-

This repository does not have a README...

ZDI-CAN-16318

Exploits for CVE-2023-32162 ZDI-CAN-16318 0-day Here you can find my Local Privilege Escalation Vulnerability report. Here you can find my Arbitrary File Read Vulnerability report. Here you can find my Arbitrary File Read\Write Vulnerability report. Here you can buy me a unicorn 🦄 Share the...

CVE-2022-37706

CVE-2022-37706 Exploit for CVE-2022-37706, a 0-day in one of the main window managers of Linux - Enlightenment https://www.enlightenment.org/. All Credit to MaherAzzouzi https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit. This is a copy of the exploit for CTFs...

AdTran-Personal-Phone-Manager-Vulns

AdTran-Personal-Phone-Manager-Vulns A repository hosting write ups for the 0 days CVE-2021-25679, CVE-2021-25680, and CVE-2021-25681. Summary CVE-2021-25679: Adtran Personal Phone Manager Authenticated Stored XSS in Change Email Address Form CVE-2021-25680: Adtran Personal Phone Manager Multiple...

gollina

$ gollina -h gollina Follina MS-MSDT 0-day MS Office RCE PoC in Go -- @dwisiswant0 Usage: gollina -c COMMAND OPTIONS... Options: -h, --host Listener host default: 0.0.0.0 -p, --port Listener port default: 8090 -n, --name Word file name w/o extension, default: gollina -c, --command Arbitrary comma...

ConPresentations

ConPresentations Micellaneous slide decks, resources, and recordings of some of my conference presentations. Conference Presentations BSidesCanberra 2023 Keynote: "When Exploits Aren't Binary" Slides OffensiveCon 2023: "The Print Spooler Bug That Wasn't" with James Forshaw Slides Video Zer0Con...

msdt-follina

msdt-follina Microsoft MS-MSDT Follina 0-day Vulnerability CVE-2022-30190 Attack Vector...

MSDT-0-Day-CVE-2022-30190-Poc

This repository does not have a README...

CVE-2022-22963

CVE-2022-22963 CVE-2022-22963 PoC Slight modified for English translation and detection of https://github.com/chaosec2021/Spring-cloud-function-SpEL-RCE/blob/main/SpelRCEPOC.py . By default whoami is executed on the target and a file vulnerable.txt is created with the URLs that are vulnerable. Mo...

CVE-2022-35649

CVE-2022-35649 Payload Generator using Python 2 and Detailed Analysis for CVE-2022-35649 The PoC in python generates payload when exploited for a 0-day of GhostScript 9.50. This 0-day exploit affect to ImageMagick with the default settings from Ubuntu repository Tested with default settings of...

CVE-2026-41940-cpanel-0day

Usage python 0day.py -f test.txt --external-only --show-all -t 10 -o testcvereport.csv Source & reference https://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940/ PLEASE DO NOT EXPLOIT, ONLY FIX PURPOSES, THIS IS A SCANNER...

CVE-2026-63030

CVE-2026-63030 WordPress REST Batch Route-Confusion SQL Injection CVE-2026-63030 Proof of Concept Research, Exploit Development & Documentation by Ch4120N ⚠️ Legal Disclaimer This repository and the accompanying tool exploit.py are intended strictly for educational purposes, authorized penetration...

fortinet-cve-2024-46671

CVE-2024-46671 0-day vulnerability discovered in FortiWeb waf version 7.4.3 build 638GA Exploit Mainly this script automate the exploitation of an authenticated IDOR vulnerability leading to account delection & default account re-creation with no password due to a logical bug in fortiweb Exploit...