CVE-2024-38355-PoC

CVE-2024-38355 Demo Socket.IO Crash This project is a Proof of Concept demonstrating CVE-2024-38355 , a denial-of-service vulnerability in socket.io. The project was created for educational purposes to show the attack mechanism and how to protect applications. About the Vulnerability CVE-2024-383...

EUVD-2026-66861

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

CVE-2026-47893

CVE-2026-47893 affects Spring Framework's HandshakeWebsocketService component within Spring WebFlux applications that support WebSocket connections. The underlying cause is that request headers are included in exception reasons during the WebSocket handshake, which may indirectly expose sensitive...

EUVD-2026-66847

When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2026-66749-Unchecked-Room-Lookup-Leads-to-Server-Crash-Let-s-Chat-

安全公告：未校验的房间查找导致服务器崩溃（Let's Chat） 分配的 CVE 编号： CVE-2026-66749 摘要 来自任意已登录账户的一个 HTTP 请求即可关闭 Let's Chat 服务器进程。 GET /messages 接受一个 room 参数，按 id 查找该房间，然后对结果调用一个方法，但未检查查找是否返回了任何内容。发送一个合法的 24 字符十六进制字符串但不属于任何房间的 id，所产生的 TypeError 会在 Mongoose 回调中被抛出。Express 只会捕获处理程序内同步抛出的异常，因此该异常会以未捕获异常的形式到达 Node，进程随即退出。...

multiparty-CVE-2026-8161

CVE-2026-8161 Proof of concept of CVE-2026-8161 Multiparty Description [email protected] and earlier are vulnerable to denial of service through an uncaught exception. The parser stores uploaded fields and files in plain JavaScript objects and does not safely distinguish parser owned keys fr...

Apache-Dubbo-Hessian2-CVE-2021-43297

Deserialization during Apache Dubbo Hessian2 Exception Handling CVE-2021-43297 1. Import the two projects into two separate IDEA instances 2. First run org.apache.dubbo.samples.basic.BasicProvidermain to start the server 3. Then run org.apache.dubbo.samples.basic.BasicConsumermain to start the...

smm_usbrt_poc

UsbRt SMM Privilege Elevation This is a Proof-of-Concept code that demonstrates the exploitation of the CVE-2017-5721 vulnerability. This PoC causes a system to be completely stuck because of Machine Check Exception occurred. All you need is CHIPSEC Framework installed. And don't forget to put...

CVE-2025-70886

CVE-2025-70886 针对 CVE-2025-70886 的概念验证（PoC）利用程序，该漏洞是 Halo CMS（v2.22.4 及更早版本）中的一个持久性拒绝服务漏洞，允许远程攻击者通过提交畸形负载导致管理评论界面崩溃。 基本信息 产品供应商: 凌霞软件 供应商网站: https://www.lxware.cn/ 受影响对象类型: 软件 / Web 应用程序 受影响产品: Halo CMS 受影响产品版本: = v2.22.4 漏洞类型: 持久性 DoS（存储型 DoS）/ 未处理异常 攻击类型: 远程 影响: 拒绝服务（管理评论页面返回 HTTP 500 / 内部服务器错误...

CVE-2021-43297-POC

CVE-2021-43297 Vulnerability Description Apache Dubbo Hessian-Lite 3.2.11 and earlier versions contain a potential RCE attack risk. When Hessian-Lite encounters a serialization exception, it outputs related information, which may trigger the toString method of certain maliciously crafted Beans,...

Vectored-Exception-Handling-Squared

Vectored Exception Handling Squared A Rust Proof of Concept. Read more on my blog, all original research by CrowdStrike, this is just the POC for it! Unless I am blind; there does not seem to be much out there POC's etc relating to the discovery made by CrowdStrike researchers, called Vectored...

CVE-2023-30547

CVE-2023-30547 PoC Exploit for VM2 Sandbox Escape Vulnerability alt img Description vm2 3.9.17 is vulnerable to arbitrary code execution due to a flaw in exception sanitization. Attackers can exploit this by triggering an unsanitized host exception within handleException, enabling them to escape...

cve-2023-20573-poc

PoC उपयोग इस रिपॉजिटरी में एक VMM है जो कस्टम कर्नेल के साथ SEV-SNP गेस्ट को बूट करता है। VMM और कर्नेल मेरे एक प्रोजेक्ट का स्ट्रिप-डाउन संस्करण हैं। होस्ट पर चलाने के लिए एक संशोधित Linux कर्नेल आवश्यक है: https://github.com/Freax13/linux/tree/for-amd। Proof of Concept को इस प्रकार चलाया जा सकत...

Voidgate

VOIDGATE Descripción: Una técnica que se puede utilizar para evadir los escáneres de memoria de AV/EDR. Puede usarse para ocultar shellcodes conocidos y detectados como msfvenom realizando descifrado sobre la marcha de instrucciones individuales de ensamblador cifradas, haciendo así que los...

TestCitrixException

Test Citrix Exception CVE-2025-6759 완화 테스트 Citrix 문서는 CVE-2025-6759에 대해 레지스트리에서 Citrix 예외 처리기를 비활성화하는 대체 완화 방법을 설명합니다. 그러나 해당 문서는 이 변경으로 인해 VDA 서비스 또는 서버 재시작이 필요한가? 라는 질문에 답하지 않습니다. 그래서 이 도구는 이를 테스트하기 위해 만들어졌습니다. 출처: CTX676735는 해당 예외 처리와 레지스트리 키가 어떻게 작동하는지에 대한 추가 정보를 제공합니다. Rapid 7의 블로그 게시물은 이 취약...

CVE-2023-41992

CVE-2023-41992 This is a proof-of-concept for CVE-2023-41992. And first of all, this has nothing to do with jailbreak ! And it is still under development. Thank everyone who helped me so far. For privacy reasons, I may not list you here. DM me if you want ! patch As far as I know, the patch is in...

CVE-2026-8389

CVE-2026-8389 This vulnerability was intended to be used at Pwn2Own 2026 Berlin, but was patched in version 150.0.3. SpiderMonkey BaselineJIT pcOffset bitfield truncation on the eager off-thread baseline-compile path, leading to a wrong-but-in-bounds bytecode pc during exception unwinding and a...

VectoredOverloading

VectoredOverloading Vectored Overloading es una técnica de inyección de PE local que se observó por primera vez en el malware KidKadi. Funciona manipulando la carga de una DLL legítima mediante Hardware Breakpoints HWBP y Vectored Exception Handling VEH para cambiar el objeto de sección de la DLL...

struts2_cve-2017-5638

struts2cve-2017-5638 Dies ist eine Art Java-Portierung des Python-Exploits unter: https://www.exploit-db.com/exploits/41570/. Diese Software wurde ohne externe Abhängigkeiten geschrieben. HAFTUNGSAUSSCHLUSS Dieses Tool ist für Sicherheitsingenieure und AppSec-Leute für Sicherheitsbewertungen...

RustChain

Descrizione Questo strumento è un semplice PoC su come nascondere artefatti di memoria utilizzando una catena ROP in combinazione con breakpoint hardware. La catena ROP cambierà le protezioni della pagina di memoria del modulo principale in N/A durante il sonno cioè quando viene chiamata la...