CVE-2025-60188-Atarim-Plugin-Exploit

CVE-2025-60188-Atarim-Plugin-Exploit CVE-2025-60188: Atarim Plugin Authentication Bypass via HMAC Forgery Overview This repository contains a Proof of Concept PoC and technical analysis for CVE-2025-60188, a critical vulnerability discovered in the Atarim WordPress plugin. This flaw allows...

CVE-2020-1337

CVE-2020-1337 CVE-2020-1337 is a bypass of PrintDemon CVE-2020-1048 ’s patch via a Junction Directory, made to remediate an Elevation of Privileges EoP\Local Privilege Escalation LPE vulnerability affecting the Windows’ Print Spooler Service. The vulnerability does require low privilege access an...

LID

██╗ ██╗██████╗ ██║ ██║██╔══██╗ ██║ ██║██║ ██║ ██║ ██║██║ ██║ ███████╗██║██████╔╝ ╚══════╝╚═╝╚═════╝ Linux Integrity Drift — "Linux is Dying" — Systematic discovery of kernel code paths that bypass LSM security guarantees The gate was never breached. It was walked around. What is LID? The Linux...

XSYS-Log4J2Shell-Ex

XSYS-Log4J2Shell-Ex CVE-2021-44228 log4j2shell PoC as part of a security research for a vulnerability patch Overview In this repository I will cover several topics and implementations which provide a PROOF OF CONCEPT regarding the Log4J 2.17.0 vulnerability . The main goal is to provide a PATCH f...

CVE-2022-23131poc-exp-zabbix-

CVE-2022-23131poc-exp-zabbix- CVE-2022-23131 Vulnerability batch detection and exploitation script Runtime environment: python3 zabbix-poc.py Run command: python3 zabbix-poc.py To detect only one target, enter 1; for batch detection, enter another value: Vulnerable URLs will be prefixed with + an...

Exch-CVE-2021-26855_Priv

Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability...

CVE-2023-2732

CVE-2023-2732 MStore API = 3.9.2 - Authentication Bypass https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/mstore-api/mstore-api-392-authentication-bypass Description The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including...

CVE-2022-36537-EXPLOIT

CVE-2022-36537 Summary R1Soft Server Backup Manager uses the ZK framework as the main framework. Its security requires all Web3 project parties to pay more attention to the security vulnerabilities of various Web3 infrastructures and patch them in time to avoid potential security risks and digita...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

CVE-2024-29988-exploit

CVE-2024-29988-exploit Exploit for Microsoft SmartScreen malicious execution april 2024 Description A critical vulnerability, CVE-2024-29988, has been discovered in Microsoft's April 2024 Patch Tuesday release. This vulnerability allows threat actors to bypass Microsoft's Mark of the Web MotW...

CVE-2023-27350-POC

CVE-2023-27350-POC Description: This tool is designed to exploit an authentication bypass vulnerability in PaperCut MF/NG versions 8.0 and above, but prior to versions 20.1.7, 21.2.11, or 22.0.9. The vulnerability allows for unauthorized access to the system and can potentially be used for...

cve-2022-23131-exp

Zabbix SSO Auth Bypass CVE-2022-23131 usage: zabbixsessionexp.py -h -t TARGET -u USERNAME -p PROXY -f FILES optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Zabbix Server -u USERNAME, --username USERNAME Zabbix Admin User -p PROXY, --proxy PROXY Proxy for...

exploit-CVE-2025-29927

Exploit for CVE-2025-29927 Next.js - Authorization Bypass Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description Next.js is a React framework for building full-stack web application...

cve-2026-25262-sm8450-research

Research Tools In the course of this work, the public tool edl B. Kerler, V3.62 was used, along with modifications based on it. Experimental testbed: To test the hypothesis of CVE-2026-25262 applicability to the SM8450 platform, an experimental tool cvefinalsingle was created on top of edl. It...

CVE-2023-32407-a-macOS-TCC-bypass-in-Metal

CVE-2023-32407-a-macOS-TCC-bypass-in-Metal...

CVE-2020-28148

CVE-2020-28148 A common way to attack WIFI, not only applicable to Xinrui a subsidiary of Sangfor WIFI products. Through multiple offensive and defensive engagements, it has been found that this exploitation method can bypass multiple AC vendors. This article is intended to disclose the...

CVE-2024-4577

PHP-CGI Windows Platform Remote Code Execution Vulnerability CVE-2024-4577 Introduction PHP is an acronym for Hypertext Preprocessor. It is now a widely used open-source scripting language that is particularly suitable for web development and embedding in HTML, and is very simple to use. CGI, whi...

CVE-2022-1388

CVE-2022-1388 BIG-IP iControl REST vulnerability CVE-2022-1388 Usage This POC is Verified! curl -i -s -k -X $'POST' \ -H $'Host: localhost' -H $'Connection: keep-alive, X-F5-Auth-Token' -H $'Authorization: Basic YWRtaW46' -H $'X-F5-Auth-Token: a' -H $'Content-Length: 39' \ --data-binary...

CVE-2024-0311

CVE-2024-0311 ? This is a PoC for what I believe is CVE-2024-0311, SB10418. A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code. Much details. Very exploit. ¯\ツ /¯ The PoC injects into a user-ran SCPBypass.exe process and writes to the...

CVE-2024-41107

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🚀 CVE-2024-41107...