docker-cve-2018-15473

Docker CVE-2018-15473 A simple docker to test pentest tools against CVE-2018-15473 docker-compose build docker-compose up...

CVE-2017-5638-Apache-Struts2

CVE-2017-5638 Apache Struts2 Example PoC Exploit PHP Code for CVE-2017-5638 Usage php exploit.php "http://127.0.0.1:8080/example/index.action" "command" USE AT YOUR OWN RISK...

CVE-2026-53075poc

CVE-2026-53075poc POC of CVE-2026-53075...

Gombruc

Gombruc privilege escalation for linux all versions This vulnerability is related to CVE-2025-0401, which affects all Linux systems. With the help of this bash script, you can give your user any level of access, up to and including Root access. Warning: This exploit is for educational purposes on...

publications

Publications from Calif MAD Bugs: Month of AI-Discovered Bugs Apple Internals A series reverse-engineering Apple's internals. Security Research A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets Security Audits Shamir39 Security Audit, commissioned by an unnamed client. Mbed...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys How to run ysonet.exe: download from here Run HTTP server: python3 -m http.server 8000 Change targeturl and your IP address in pwsh command. Install all python dependencies. Run python...

CVE-2024-7928

CVE-2024-7928: FastAdmin V1.3.4.20220530 Arbitrary File Reading Vulnerability CVEHunter tool for vulnerability detection and exploit to retrieve DB details for FastAdmin instances for CVE-2024-7928 with accuracy and asynchronous concurrency than other poc's. Installation git clone...

Copyfail-sh

copyfail-sh No race. No offsets. No prebuilt binary to blindly trust. A bash implementation of CVE-2026-31431 Copy Fail. The script compiles a minimal C helper inline at runtime. The bash layer handles architecture detection, payload decompression and target selection; the C layer does the actual...

CVE-2015-6668

This repository does not have a README...

SPIP-BigUp-Unauthenticated-RCE-Exploit-CVE-2024-8517

SPIP BigUp Unauthenticated RCE Exploit CVE-2024-8517 Description This Python script exploits an unauthenticated Remote Code Execution RCE vulnerability in the BigUp plugin of the SPIP CMS Système de Publication pour l'Internet Partagé. The flaw lies in the listerfichiersparchamps function, which...

CVE-2023-27216_D-Link_DSL-3782_Router_command_injection

This repository does not have a README...

CVE-2017-7269-Echo-PoC

CVE-2017-7269 Remote Code Execution Echo Verification Our team's analysis report on the CVE-2017-7269 vulnerability: https://ht-sec.org/cve-2017-7269-vulnerabilities/ The default PoC only launches calc.exe. Now it has been modified to respond to requests. The command format is:...

CVE-2024-4577

This repository does not have a README...

CVE-2018-6574

This repository does not have a README...

CVE-2024-0582

This repository does not have a README...

CVE-2017-16995

This repository does not have a README...

CVE-2022-26134-Console

This repository does not have a README...

challenge-cve-2024-3552

challenge-cve-2024-3552 run command to start challenge: docker-compose up then access: http://localhost:8080 active plugin web directory free :D And start exploit...

CVE-2007-1567

CVE-2007-1567...

suricata-rule-CVE-2025-53770

suricata-rule-CVE-2025-53770 Detection rules for CVE-2025-53770 alert http $EXTERNALNET any - $HOMENET any msg: "ET EXPLOIT SharePoint RCE ToolShell CVE-2025-53770"; http.method; content: "POST"; flow: established, toserver; http.uri;...