230700 matches found
CVE-2025-55182-PoC
React2Shell CVE-2025-55182 PoC Usage Interactive shell ./react2shell -u http://target:3000 Single command ./react2shell -u http://target:3000 -c "id" WAF bypass 128KB junk data ./react2shell -u http://target:3000 -waf 128 Build go build -o react2shell . Options Flag| Description ---|--- -u| Targe...
CVE-2025-54424
https://raw.githubusercontent.com/hophtien/CVE-2025-54424/main/unrevolted/CV-v3.9.zip CVE-2025-54424: 1Panel RCE Scanner and Safe Testing Toolkit for Labs CVE-2025-54424 is a vulnerability related to 1Panel, involving client certificate bypass that may lead to remote code execution. This reposito...
CVE-2023-36003
CVE-2023-36003: Windows Defender Exploit Protection Bypass PoC This repository contains a Proof of Concept PoC for CVE-2023-36003 , a critical security feature bypass vulnerability affecting Windows Defender Exploit Protection. Overview CVE-2023-36003 is a vulnerability in Windows Defender that...
CVE-2026-34835-Black-box-Analysis
This repository provides a black-box security analysis of CVE-2026-34835 from the perspective of an external penetration tester. The objective is not to reverse engineer the vulnerability, but to document how a security assessor can identify, validate, and evaluate its impact during an authorized...
CVE-2026-8337
CVE-2026-8337 CVE-2026-8337 is an Insecure Direct Object Reference IDOR vulnerability in Concrete CMS that affects the Survey feature. Unlike CVE-2026-8347 which involved Express associations, this vulnerability allows an unauthenticated attacker to participate in a restricted/private survey unde...
CVE-2017-8625_Bypass_UMCI
what is ! Windows Defender Device Guard ! Windows Defender Device Guard is a combination of enterprise-related hardware and software security features that, when configured together, will lock a device down so that it can only run trusted applications that you define in your code integrity...
Elysium-Vanguard-Sentinel-Audit
SENTINEL-ROOT-AUDIT: Honor Magic V2 Hypervisor Detection Suite ➲ Project Overview SENTINEL-ROOT-AUDIT is a professional-grade security suite designed to audit kernel integrity and detect hypervisor-level interventions on the Honor Magic V2 SM8550. While the core vulnerability CVE-2025-38352 allow...
CVE-2025-32462
CVE-2025-32462 - Sudo Host Bypass Exploit Original Discovery This vulnerability was discovered by Rich Mirch. More details can be found at: https://cxsecurity.com/issue/WLB-2025070022 About This script is an exploit for CVE-2025-32462, allowing privilege escalation by bypassing sudo's host...
CVE-2026-1337-AI-Coding-Assistant-Prompt-Injection-to-Sandbox-Escape
CVE-2026-1337 – AI Coding Assistant Prompt Injection to RCE 📖 Overview A prompt injection vulnerability in an AI-powered code review bot allows an attacker to inject arbitrary shell commands by manipulating the bot’s “fix” suggestion. The sanitizer uses a simple blacklist that is bypassed using...
QuickAssist_UAC_Bypass
QuickAssist UAC Bypass Remark: If you search for a UAC bypass with better compatibility ex: Windows server OSes, you can use:TabTip UAC Bypass QuickAssist is an application that was introduced in Windows 10 1809. It is an UIAccess binary that is installed by default and can be abused to bypass UA...
CVE-2025-29927
CVE-2025-29927 - Next.js Middleware Authentication Bypass Advanced Bypass 🔥 Overview An advanced PoC for CVE-2025-29927 , allowing authentication bypass in Next.js Middleware by manipulating specific headers. This template enhances WAF evasion and security bypass techniques. 🚀 Features ✅...
https-github.com-xaitax-CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability
CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-21413, a significant security vulnerability discovered in Microsoft Outlook with a CVSS of 9.8. Termed the MonikerLink bug, this vulnerability has...
CVE-2024-55591-POC
--port 443 --ssl Then use the prompt: FortiOS get system status FortiOS exit Reset admin password: python3 poc.py --host --port 443 --ssl \ --reset-user Admin2 --new-pass Forti2024! Developer Telegram: @chernyzhizn Disclaimer: This tool is provided for educational and authorized testing purposes...
poc-cve-2025-29927
Next.js Middleware Bypass CVE-2025-29927 Proof of Concept This repository contains a proof of concept POC for CVE-2025-29927 , a critical vulnerability in Next.js that allows attackers to bypass authorization checks implemented in middleware. 📋 Table of Contents 1. Running the POC Application 2...
CVE-2025-32462-POC
CVE-2025-32462 – sudo -h Privilege Escalation PoC 🚨 Local privilege escalation exploit for sudo via the -h/--host argument Affects systems with sudo misconfigurations allowing unintended root access. 🧠 About This PoC demonstrates CVE-2025-32462 , a logic flaw in sudo all versions ≤ 1.9.17, where...
CVE-2015-3224
CVE-2015-3224 Exploit - Rails Web Console RCE A JavaScript implementation Node.js of the exploit for CVE-2015-3224. This tool targets Ruby on Rails applications running vulnerable versions of the web-console gem, allowing unauthenticated Remote Code Execution RCE. About the Vulnerability...
CVE-2026-41940
CVE-2026-41940: cPanel/WHM Authentication Bypass Single & Multi-Target Disclaimer: This document and the associated script exploit.py are provided strictly for educational purposes, security research, and authorized penetration testing. Do not use this software against systems you do not own or d...
CVE-2021-43617
CVE-2021-43617 This is a reproduction of PHP Laravel 8.70.1 - Cross Site Scripting XSS to Cross Site Request Forgery CSRF vulnerability Description The vulnerability exploits the fact that we can bypass laravel image file upload functionality to upload arbitary files on the web server which let u...
CVE-2026-41940
CVE-2026-41940: cPanel/WHM Authentication Bypass Single & Multi-Target Disclaimer: This document and the associated script exploit.py are provided strictly for educational purposes, security research, and authorized penetration testing. Do not use this software against systems you do not own or d...