CVE-2023-21716-Analysis-ICT287

CVE-2023-21716 Analysis-ICT287: Microsoft Word Remote Code Execution Overview This repository documents the analysis and reproduction of CVE-2023-21716, a heap-based buffer overflow vulnerability in Microsoft Word's RTF parser with a CVSS score of 9.8 Critical. What's Inside File| Description...

CVE-2015-0235-test

CVE-2015-0235-test Ansible playbook to check vulnerability for CVE-2015-0235. This is based on the test program provided by the University of Chigago link. Ansible will allow you to specify a large number of host machines to test at once. This does not patch or restart anything , it only reports ...

cve-2022-30190

cve-2022-30190 Aka Follina = benign POC. Notes: Commit 5ea77 doesn't work...

jboss-autopwn-1

jboss-autopwn JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security C. Papathanasiou 2010 INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss A...

cve-2023-32243

This repository does not have a README...

DoS-via-cache-poisoning-by-forcing-SPA-mode-CVE-2025-43864-

Welcome to React Router! A modern, production-ready template for building full-stack React applications using React Router. Features 🚀 Server-side rendering ⚡️ Hot Module Replacement HMR 📦 Asset bundling and optimization 🔄 Data loading and mutations 🔒 TypeScript by default 🎉 TailwindCSS for stylin...

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813-

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813- Apache Tomcat - Remote Code Execution via Session Deserialization CVE-2025-24813...

WS_FTP-CVE-2023-40044

WSFTP-CVE-2023-40044 Repository with everything I have tracking the impact of WSFTP CVE-2023-40044 Includes possibly affected organizations and domains utilizing header methods. I've also built a news ticker which tracks new stories about MOVEit and WSFTP, available at...

MoodleExploit

Moodle Exploit Exploit Title: Moodle v3.4.1 RCE Exploit Google Dork: inurl:"/course/jumpto.php?jump=" Date: 15 March 2019 Exploit Author: Darryn Ten Vendor Homepage: https://moodle.org Software Link: https://github.com/moodle/moodle/archive/v3.4.1.zip Version: 3.4.1 Possibly 3.5.0 and maybe even...

Penetration-Testing-Assessment-23-04-2026

Penetration Testing Report – IIS WebDAV Exploitation Overview This project demonstrates a complete penetration testing lifecycle performed on a vulnerable target system. The assessment follows a structured approach including reconnaissance, scanning, enumeration, exploitation, and...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Technical Writeup Tested Distro / Version Distro| Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1| 6.12.0-124.45.1.el101 SUSE 16| 6.12.0-160000.9-default...

CVE-2019-0708

This repository does not have a README...

MacDirtyCow

MacDirtyCow Example of CVE-2022-46689 aka MacDirtyCow. What? MacDirtyCow is a privilege escalation vulnerability in macOS, similar to the Dirty COW vulnerability in Linux. The vulnerability resides in the copy-on-write COW mechanism used by macOS's XNU kernel. The vulnerability allows an attacker...

CVE-2022-26485

CVE-2022-26485 Tested against Firefox 78.0 Windows https://ftp.mozilla.org/pub/firefox/releases/78.0/win64/en-US/Firefox%20Setup%2078.0.exe...

CVE-2022-22965

Spring Framework Vulnerabilities - CVE-2022-22965 List of vulnerable / non-vulnerable software https://github.com/NCSC-NL/spring4shell/blob/main/software/README.md Finding vulnerable code Prerequisites for being vulnerable to CVE-2022-22965: 1 Use of Spring Framework See PowerShell and bash scrip...

CVE-2018-3810_exploit

This repository does not have a README...

CVE-2015-6640

CVE-2015-6640 poc by Edward Hung https://source.android.com/security/bulletin/2016-01-01.html https://android.googlesource.com/kernel/common/+/69bfe2d957d903521d32324190c2754cb073be15%5E%21/F0...

CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation

CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation This is just a quick note on how to exploit these vulnerabilities to get root. Start by utilizing this tool on the attacker machine: https://raw.githubusercontent.com/ibrahmsql/CVE-2025-6018/refs/heads/main/CVE-202 You should now have a shell a...

CVE-2022-21894-Payload

This is a simple example payload for CVE-2022-21894 that demonstrates how an attacker could map a second stage payload in order to be able to call EFI services. A writeup of this vulnerability can be viewed here: https://github.com/Wack0/CVE-2022-21894. The code in this repository extends the PoC...

CVE-2021-22205

CVE-2021-22205 CVE-2021-22205 RCE tool is only for sharing and communication. Do not use for unauthorized testing, otherwise the author is not responsible. -R string VPS to load tools eg: -R 127.0.0.1:8083 -T string Tool name eg: -T fscan -c string exec cmd eg: -c "id" default "id" -host string...