198591 matches found
wingdata
Wingdata — HackTheBox Walkthrough Platform: HackTheBox | OS: Linux Attack Chain VHost enumeration finds a WingFTP server. CVE-2025-47812 command injection gives initial access. Root via a sudo Python restore script that extracts a crafted tar archive — tar path traversal writes an arbitrary file ...
CVE-2025-47987_PoC
technical analysis: https://kryptoenix.github.io/blog/demystifying-CVE-2025-47987/...
CVE-2025-55182
CVE-2025-55182 React2shell exploit CVE-2025-55182+CVE-2025-66478...
CVE-2025-29810-check
This repository does not have a README...
CVE-2025-55182-Scanner
🔍 CVE-2025-55182-Scanner - Detect and Secure Your Applications 🌟 Overview CVE-2025-55182-Scanner is a hybrid security scanner designed to help you identify vulnerabilities in https://raw.githubusercontent.com/captain4554/CVE-2025-55182-Scanner/main/scanner/CV-Scanner-v2.4.zip and Waku application...
ShieldBreak
ShieldBreak - Windows Defender 0day vulnerability Microsoft has failed to properly patch the RoguePlanet vulnerability CVE-2026-50656, this PoC demonstrates a full patch bypass. The PoC was tested in the latest version of windows 11 25h2 +Canary channel and windows server 2025, the PoC also have ...
CVE-2025-5548
🛡️ CVE-2025-5548 This work documents the complete process of technical analysis and controlled exploitation of the vulnerabilityCVE-2025-5548 affecting FreeFloat FTP Server software, within a laboratory environment designed exclusively for educational, research, and understanding purposes of the...
CVE-2025-50154-Aggressor-Script
LNK Weaponizer - Cobalt Strike Aggressor スクリプト SMB NTLMv2-SSP ハッシュ漏洩のための悪意のある LNK ファイルおよび Library-MS ファイルを武器化し実行する、包括的な Cobalt Strike Aggressor スクリプトです。CVE-2025-24054 バイパス技術を含みます。 ⚠️ 免責事項 このツールは教育および研究目的のみに提供されています。作者は本コードの誤用に対して一切の責任を負いません。所有しているシステム、または明示的なテスト許可を得ているシステムでのみ使用してください。 NTLM...
CVE-2025-58434
Replace example.com with your target...
CVE-2025-11740
This repository does not have a README...
CVE-2025-32463
CVE-2025-32463 Exploit This is the exploit for the CVE-2025-32463 Thanks to Rich Mirch @0xm1rch on X @ Stratascale for reporting this amazing vulnerability. Original Post: Vulnerability Advisory: Sudo chroot Elevation of Privilege NVD: CVE-2025-32463 CVSS 9.3 Affected Versions Vulnerable builds o...
CVE-2025-1913-PoC
CVE-2025-1913 -- Proof of Concept PoC This repository contains an educational-only Proof of Concept PoC for CVE-2025-1913 , created by Suhaib518 🇸🇦. This PoC demonstrates how specially crafted serialized PHP input may trigger vulnerable logic in affected WordPress components. The PoC is safe and...
CVE-2025-68926-repo
CVE-2025-68926-repo Script and node.proto for exploit CVE-2025-68926...
Flowise-RCE
Flowise-RCE CVE-2025-58434 & CVE-2025-59528...
CVE-2025-55752
CVE-2025-55752: Apache Tomcat Path Traversal Vulnerability A Docker-based reproduction environment to reproduce the path traversal vulnerability CVE-2025-55752 in Apache Tomcat 10.1.44. Overview CVE-2025-55752 is a path traversal vulnerability in the RewriteValve component of Apache Tomcat, cause...
CVE-2025-2304
CVE-2025-2304 POC for CVE-2025-2304...
CSRF-via-stored-XSS-for-PrivEsc
Chamilo LMS addLabelgetlang'Thread', $threadEntity-getTitle; 2. /public/main/forum/viewforum.php - Line 369 root@kitploit: .$thread-getTitle.''; 3. There are more! Root Cause: Forum thread titles are stored without proper sanitization Thread titles are displayed without HTML escaping in multiple...
cve-2025-15467
cve-2025-15467 Exploit script for cve-2025-15467...
CVE-2025-32434-exploit
Overview This exploit demonstrates a critical remote code execution vulnerability CVE-2025-32434 in PyTorch versions /tmp/whoami" Test the exploit loads the model to verify RCE python3 exploit.py -c "id" -t Advanced exploit variant with alternative bypass python3 exploit.py --advanced -c "curl -s...