ZygoteExploitDemo

🔥 ZygoteExploitDemo - CVE-2024-31317 Android Security Lab 🚨 Educational Demonstration of Android Zygote Injection Vulnerability 📋 Overview This lab demonstrates CVE-2024-31317 , a critical Android vulnerability that allows a malicious app to escalate privileges to SYSTEM level UID 1000 and bypass...

cve-2023-34034

cve-2023-34034 Demonstration of CVE-2023-34034 authorization bypass in Spring Security. See CVE-2023-34034 Spring Security Authorization Bypass on Don't Panic!...

CVE-2021-43617

CVE-2021-43617 This is a reproduction of PHP Laravel 8.70.1 - Cross Site Scripting XSS to Cross Site Request Forgery CSRF vulnerability Description The vulnerability exploits the fact that we can bypass laravel image file upload functionality to upload arbitary files on the web server which let u...

objection

📱objection - Exploración Móvil en Tiempo de Ejecución objection es un kit de herramientas de exploración móvil en tiempo de ejecución, impulsado por Frida, diseñado para ayudarte a evaluar la postura de seguridad de tus aplicaciones móviles, sin necesidad de un jailbreak. Soporta tanto iOS como...

sudo-Security-Bypass-vulnerability-CVE-2019-14287

This repository does not have a README...

PolyEngine

PolyEngine — Polymorphic PE Packer 📦 PolyEngine is a research-grade, evasive PE packer designed for CTF challenges and low-level Windows security education. It focuses on bypassing EDR and AV heuristics through a layered stack of in-memory execution and obfuscation techniques. This is a side...

cve-2022-37298

CVE-2022-37298: RCE in Shinken Monitoring Versions affected: 2.4.3 Disclosure link: https://github.com/naparuba/shinken/commit/2dae40fd1e713aec9e1966a0ab7a580b9180cff2 CVE link: https://vulners.com/cve/CVE-2022-37298 Description The SafeUnpickler class found in shinken/safepickle.py implements a...

KTO

KTO - Kick Them Out https://github.com/user-attachments/assets/0ebf61af-c306-4825-b836-95df59052c27 Point it at an SSID and it disconnects the devices on that network, including ones that reconnect. You give it the network name; it finds the access point, finds the clients, and picks a...

exploit_linux_kernel4.13

This repo contains an old poc that combines three CVEs CVE-2017-14954, CVE-2017-18344, CVE-2017-5123. The poc is a Local Privilege Escalation for Linux Kernel 4.13 tested on Ubuntu. The exploit uses an info leak CVE-2017-14954 to bypass KASLR, an arbitrary read CVE-2017-18344 to read the kernel...

CVE-2023-44760_ConcreteCMS-Stored-XSS---TrackingCodes

ConcreteCMS Stored XSS v.9.2.1 Author: Sergio Description: Multiple Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to the Header and Footer Tracking Codes of the SEO & Statistics. Attack Vectors: Scripting A...

CVE-2026-18315-PoC

CVE-2026-18315-PoC Proof-of-concept for CVE-2026-18315 TrueBooker = 1.2.6 WordPress Plugin: Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover...

CVE-2023-22524

Prueba de concepto de la vulnerabilidad RCE en Atlassian Companion CVE-2023-22524 Resumen Este repositorio contiene una prueba de concepto PoC para la vulnerabilidad de ejecución remota de código recientemente descubierta en Atlassian Companion para macOS, identificada como CVE-2023-22524. Este...

CVE-2021-27651

Summary An attacker can bypass all stages of the password reset flow and reset any user's account on Pega infinity. This is done by 1 initiating the password reset flow and typing in the victim email, then 2 forcing the HTTP POST request to update the password through. An attacker could login usi...

CVE-2021-27289

🐝 CVE-2021-27289: Playback Protection Bypass on Ksix Zigbee devices 📑 Table of Contents Before We Get Serious The Story Behind This CVE Vulnerability Affected Devices Technical Details Attack Scenario Impact Proof of Concept Demo Videos Original Blog Post Researcher Zigbee Basics Background and...

CVE-2020-13957

Apache Solr RCE CVE-2020-13957 Docker Demo Mac Demo NVD CVE-2020-13957 Description NVD CVE-2020-13957 Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous which could be used for remote code execution to be configured in a ConfigSet...

CVE-2022-40684

CVE-2022-40684 by 1vere$k For now it's a POC copy for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Coppied from https://github.com/horizon3ai/CVE-2022-40684 Analysis The exploit uses the simple payload: PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 Host...

CVE-2025-31161

CVE-2025-31161 - CrushFTP Authentication Bypass Exploit PoC CVE-2025-31161 - Authentication Bypass CrushFTP 📌 CVE Details ID : CVE-2025-31161 Type : Authentication Bypass Vendor : CrushFTP Impact : Allows unauthenticated attackers to forge a valid CrushAuth token and create a fully privileged adm...

CVE-2023-42793

CVE-2023-42793 JetBrains TeamCity before 2023.05.4 is vulnerable to authentication bypass leading to RCE Usage To get a reverse shell python3 exploit.py References https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/...

phpBB-CVE-2026-48611

USE AT YOUR OWN RISK. This tool is provided strictly for authorized security research, penetration testing, and educational purposes. Only run it against systems you own or have explicit, written permission to test. The author is not responsible or liable for any illegal or unethical use of this...

CVE-2026-76581-Detector

CVE-2026-76581 - WPMU DEV Dashboard Vulnerability Detector A safe, passive Python detector for identifying WordPress installations running a version of WPMU DEV Dashboard affected by CVE-2026-76581. The detector does not exploit the authentication bypass, request or replay HMAC values, or create ...