SindriKit

SindriKit Offensive Development Deserves Better Architecture. A C library for building offensive capabilities. Core Concept Most offensive utilities hardcode their execution mechanics inside the technique's logic. A reflective loader doesn't just map an image; it maps it using a specific, hardcod...

CVE-2026-119266

A flaw was found in the Quota component of chromium-browser. This vulnerability is caused by a use-after-free memory corruption issue during storage quota operations. A remote attacker could exploit this flaw by enticing a user to visit a specially crafted web page, potentially enabling arbitrary...

CVE-2026-119260

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by convincing a user to open a specially crafted HTML page. The issue is caused by a use-after-free memory flaw in the Frames component, where previously released...

CVE-2022-31814

pfBlockerNG = 2.1.426 Unauth RCE This script is a proof-of-concept exploit for pfBlockerNG = 2.1.426 that allows for remote code execution. It takes a single target URL or a list of URLs, uploads a shell, executes a command, and then deletes the shell. Requirements This script requires Python 3.x...

CVE-2019-0604

CVE-2019-0604 CVE-2019-0604 From https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...

trojanizer

TROJANIZER Version release : v1.1 Stable Author : pedro ubuntu r00t-3xp10it Codename: TroiaRevisited Distros Supported : Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 FRAMEWORK DESCRIPTION The Trojanizer tool uses WinRAR SFX to compress the two files input by...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

CVE-2025-6440

CVE-2025-6440 — WordPress WooCommerce Dynamic Pricing & Discounts Plugin Overview This repository contains a Python proof-of-concept PoC script for testing an unauthenticated file upload vulnerability affecting the WordPress WooCommerce Dynamic Pricing & Discounts plugin. ⚠️ This project is...

CVE-2024-28397-Exploit-Automation

CVE-2024-28397 Exploit Automation A Python automation script for exploiting the js2py Sandbox Escape vulnerability CVE-2024-28397. This tool automates the payload generation and delivery process to achieve Remote Code Execution RCE on vulnerable instances. ⚠️ Legal Disclaimer Usage of this tool fo...

CVE-2021-26814

CVE-2021-26814 A simple python PoC to exploit CVE-2021-26814 and gain RCE on Wazuh Manager v.4.0.0-4.0.3 through the API service. To run it, simply make the .py script executable and launch it with the required parameters. PoC.py -h -user USERNAME -pwd PASSWORD -lip SRCIP -lport SRCPORT -tip DEST...

CVE-2024-23897

CVE-2024-23897 CVE-2024-23897 - Arbitrary file read vulnerability through the CLI can lead to RCE Products and Versions affected: Product| Affected Versions ---|--- Jenkis Server| = 2.441 = LTS 2.426.3 CVSS: CRITICAL Actively Exploited: YES Patch: YES Mitigation: YES Help usage: CVE-2024-23897.py...

CVE-2022-22909

CVE-2022-22909 Description A Code Injection vulnerability has been found on the Hotel Druid v3.0.3 application, which an attacker could exploit to execute remote code on the server. For a successful exploitation, an attacker should have the privilege to add a new room. Vulnerability description T...

CVE-2021-21551

CVE-2021-21551 A PoC that exploits Dell's dbutil23 driver. Will get code execution on a system that has HVCI disabled as shown below: Ouptut: The write-up for this code can be found here: https://ch3rn0byl.com/2021/05/a-dell-cve-2021-21551/...

CVE-2026-8713

CVE-2026-8713 — Avada Fusion Builder WordPress Exploit Pre-Auth Path Traversal → Arbitrary File Delete → Force Reinstall → RCE Overview CVE-2026-8713 is a CVSS 9.1 critical vulnerability in the Avada Fusion Builder plugin/theme for WordPress. The maybedeletefiles function in the FusionFormDBEntri...

CVE-2019-0752

https://www.thezdi.com/blog/2019/5/21/rce-without-native-code-exploitation-of-a-write-what-where-in-internet-explorer PoC exploit for CVE-2019-0752 Targets Internet Explorer 11 32bit on Windows 10 x64 up to RS4, RS5? Uses special address values in adddition to some path magic to avoid using...

MDaemon-Advisories

MDaemon-Advisories MDaemon Advisories: CVE-2021-27180 Reflected XSS CVE-2021-27181 CSRF Token Fixation CVE-2021-27182 Iframe injection CVE-2021-27183 Remote Code Execution Those vulnerabilities were already patched on January 2021 and are published for CVE purposes. They can be chained to achieve...

CVE-2024-6387-poc-1

CVE-2024-6387 regreSSHion in OpenSSH Description CVE-2024-6387, nicknamed "regreSSHion," is a critical vulnerability in OpenSSH that allows unauthenticated remote attackers to execute code with root privileges on vulnerable Linux systems. This vulnerability arises from a race condition in the...

watchTowr-vs-JunosEvolved-CVE-2026-21902

watchTowr-vs-JunosEvolved-CVE-2026-21902 Detection Artifact Generator for Juniper Junos Evolved CVE-2026-21902. https://github.com/user-attachments/assets/a7d667e1-7636-4097-ab3f-838944cdcccc See our blog post for technical details. Detection in Action python...

CVE-2025-32434-exploit

Overview This exploit demonstrates a critical remote code execution vulnerability CVE-2025-32434 in PyTorch versions /tmp/whoami" Test the exploit loads the model to verify RCE python3 exploit.py -c "id" -t Advanced exploit variant with alternative bypass python3 exploit.py --advanced -c "curl -s...

DNS-Mayhem-CVE-2026-41096-Deep-Dive

DNS-Mayhem-CVE-2026-41096-Deep-Dive In‑depth technical analysis of CVE‑2026‑41096, a critical heap overflow in Windows DNSAPI.dll enabling remote code execution via crafted DNS responses. Includes attack vectors, patch insights, and defensive guidance for security teams. Overview CVE‑2026‑41096 i...