CVE-2021-40859

CVE-2021-40859 Auerswald VoIP System Secret Backdoors -PoC Tool usage: CVE-2021-40859.py http://target:port...

Patch-the-Path-CVE-2025-55234-Detection-Defense

Patch-the-Path-CVE-2025-55234-Detection-Defense This playbook outlines detection, containment, and remediation strategies for CVE-2025-55234, a critical Windows SMB privilege escalation flaw. By Mark Mallia Introduction In today’s constantly shifting cyber-risk landscape, the ability to pivot fro...

CVE-2024-32371

CVE-2024-32371 Description Description A vulnerability identified as CVE-2024-32371 allows an attacker to elevate privileges by changing the type parameter from 1 to 0. This vulnerability enables an attacker with a regular user account to escalate their privileges and gain administrative access t...

cve-2016-1764

PoC Exploit Code for CVE-2016-1764 Recovery of Plaintext iMessage Data Without Breaking Crypto Authors Shubham Shah from Bishop Fox Joe DeMesy from Bishop Fox Matthew Bryant CVE-2016-1764 Vendor: Apple Release Date: April 8, 2016 Patch Date: March 21, 2016 Systems Affected: Messages on OSX Mounta...

CVE-2024-3293-Poc

CVE-2024-3293-Poc rtMedia for WordPress, BuddyPress and bbPress get \buddypress-media\app\helper\RTMediaModel.php:61 RTMediaModel-getmedia \buddypress-media\app\helper\RTMediaModel.php:227 RTMediaQuery-populatemedia \buddypress-media\app\main\routers\query\RTMediaQuery.php:869...

CVE-2022-22963-Exploit

CVE-2022-22963 Exploit This repository contains a Rust-based exploit for the CVE-2022-22963 vulnerability found in Spring Cloud Function versions 3.1.6, 3.2.2, and older unsupported versions. The vulnerability allows remote code execution and access to local resources through a specially crafted...

CVE-2023-28432-minio_update_rce

minio-CVE-2023-28432-rce https://github.com/AbelChe/evilminio/tree/main Original project repository Personal packaging archive Affected versions: 2019-12-17T23-16-33Z to RELEASE.2023-03-20T20-16-18Z Reproduction: https://www.yuque.com/jason-soozc/luhd40/pgabr9xvg0kgx85v?singleDoc "MinIO...

CVE-2025-0868

Penetration Testing Project Report: Exploiting CVE-2025-0868 DocsGPT RCE via JSON Eval 1. Introduction A critical Remote Code Execution RCE flaw CVE-2025-0868 was disclosed on February 20, 2025, in the open-source DocsGPT library, caused by unsafe use of eval when parsing JSON payloads. Key...

CVE-2025-55182-checker

CVE-2025-55182 Vulnerability Detector - Enhanced Edition A comprehensive vulnerability detection tool for CVE-2025-55182 in React/Next.js applications with multiple detection techniques. ⚠️ Legal Disclaimer FOR AUTHORIZED SECURITY TESTING AND RESEARCH PURPOSES ONLY This tool is designed for:...

CVE-2026-3629

CVE-2026-3629 - WordPress Privilege Escalation Checker A command-line tool to detect CVE-2026-3629 , a critical privilege escalation vulnerability in the "Import and export users and customers" WordPress plugin. 📢 Join Our Community Stay updated with the latest security tools, vulnerabilities, an...

CVE-2025-40602

CVE-2025-40602 📌 Overview CVE-2025-40602 is a local privilege escalation vulnerability affecting SonicWall Secure Mobile Access SMA 1000 series appliances. The flaw exists in the Appliance Management Console AMC due to insufficient authorization checks , allowing an authenticated low-privileged...

CVE-2025-66956

CVE-2025-66956 Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL. CVSS Vectors CVSS 3.1: 9.8, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS 4.0: 10.0,...

CVE-2025-9074-Docker-Exploit

CVE-2025-9074 Docker Container Command Execution Tool A powerful Docker remote API exploitation tool for security research and testing of CVE-2025-9074 vulnerability. Core Advantages ✅ Fully automated container lifecycle management : Automatically creates temporary containers, cleans up after...

njRAT-0.7d-Stub-CSharp

This repository does not have a README...

CVE-2018-10933-libSSH-Authentication-Bypass

libSSH-Authentication-Bypass Spawn to shell without any credentials by using CVE-2018-10933 Information about CVE-2018-10933 by libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Bugfix Release by libSSH :...

pfsense-security-research

Authenticated Arbitrary File Read in pfSense 2.8.0 via Diagnostics Web Interface CVE ID: CVE-2025-53392 Date: 2025-06-27 Author: Seth Kraft Vendor Homepage: https://www.netgate.com/ Vendor Changelog: https://docs.netgate.com/pfsense/en/latest/releases/ Software Link:...

citrix-cve-2021-22941-lab

⚠️ Disclaimer This is a mock simulation of the CVE-2021-22941 vulnerability for testing purposes. The mock server replicates the actual vulnerable behavior where the Upload.aspx endpoint is accessible without authentication and returns LocalFile GUID responses, as documented in the official CVE an...

CVE-2025-55182

CVE-2025-55182 This repository contains a PoC reproduction of CVE-2025-55182 , a critical security vulnerability in React Server Components RSC that allows unauthenticated arbitrary code execution. Description The vulnerability exists in how React Server Components deserialize "Server Actions" fr...

GrafanaDirectoryScanner

PoC for CVE-2021-43798 Grafana is an open-source platform for monitoring and observability. Grafana versions from 8.0.0-beta1 to 8.3.0 except patched versions are vulnerable to directory traversal, allowing access to local files. The vulnerable URL is: /public/plugins//, where is the plugin ID fo...

CVE_2022_46395_Gazelle

Exploit for CVE-2022-46395 to run on FireTV 3rd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE-2022-46395. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32-bit user space. The POC exploits a bug in the ARM Mal...