1462396 matches found
CVE-2017-0199
Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...
CVE-2008-1613
CVE-2008-1613...
packages_apps_Bluetooth_AOSP10_r33_CVE-2022-20126
This repository does not have a README...
CVE-2023-39725
This repository does not have a README...
CVE-2024-45337-POC
CVE-2024-45337-POC Proof of concept POC for CVE-2024-45337 Build go version go version go1.23.2 linux/amd64 go build Usage Usage of ./CVE-2024-45337-POC: -addr string Address of ssh server default "127.0.0.1:2222" -authorised-pubkey string The allowed pubkey that will pass verification Must be pu...
CVE-2023-35671
The article has been moved here: https://mrtiz.github.io/CVE-2023-35671...
CVE-2020-14364
CVE-2020-14364...
helm-plugin-path-traversal-security-assessment
CVE-2026-35204 - Helm Plugin Path Traversal Arbitrary File Write Consultant-Style Cybersecurity Report Professional vulnerability assessment report for Helm plugin path traversal risk, including technical analysis, impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details...
multicast_bytecopy
multicastbytecopy This code is published for security researchers, do not use this code for any purpose unless you know what you are doing. multicastbytecopy is a kernel r/w exploit for iOS 15.0 - 15.1.1 by @jaakerblom and the spiritual successor of multipathkfree. The exploit can be adapted to...
PetitPotam
PetitPotam PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions : The tools use the LSARPC named pipe with inteface c681d488-d850-11d0-8c52-00c04fd90f7e because it's more prevalent. But it's possible to trigger with the EFSRPC named...
CVE-2026-49413
...
CVE-2024-6387
CVE-2024-6387...
cve-2019-14540-exploit
CVE-2019-14540 Exploit http://www.leadroyal.cn/?p=939 Environment limitation: This demo uses the jndi ldap exploitation method, so a low version less than 8u191 of the jdk is required. 1. Use marshalsec to create an ldap service on local port 1389, pointing to the http service on local port 8000...
vaas-cve-2014-0160
Vulnerability as a Service - CVE 2014-0160 A Debian Wheezy Linux system with a vulnerable version of libssl and openssl and a web server to showcase CVS-2014-0160, a.k.a. Heartbleed. Overview This docker container is based on Debian Jessie and has been modified to use a vulernable version of libs...
Struts2-048
Struts2-048 CVE-2017-9791 Author: DragonEgg def Usage: print 'check:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action' print 'poc:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action command' Demo...
CVE-2023-42442
Red Team Offense and Defense: Post-Exploitation Process Sharing for JumpServer Unauthorized Access Vulnerability CVE-2023-42442 Usage: go run CVE-2023-42442.go --url http://192.168.123.120 For details, see the WeChat public account article: https://mp.weixin.qq.com/s/NCSnTsOMxslmf5S6d9896A...
middleware-auth-bypass
middleware-auth-bypass CVE-2025-29927 a poc of the next.js middleware authentication bypass...
cve-2021-21300
This repository does not have a README...
saleemrashid-sudo-cve-2019-18634
CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Credit to Joe Vennix from Apple Information Security for finding the bug...