ppsx-file-generator

Introduction By Temesgen Yibeltal [email protected] Based on code by https://github.com/bhdresh/CVE-2017-8570 now removed ppsx-file-generator is a python tool that generates a power point slide show file that executes code from a remote source based on an existing file. What does it do? The...

CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner

Python2 Multithreaded Scanning for Tomcat-Ajp Protocol File Read Vulnerability A tool for scanning SRC rewards The PoC originates from https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi/, I am not the author of the PoC!!!! Operation 1. Place the domain/IP to be scanned in ip.txt Do not...

CVE-2025

CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption Overview CVE-2025-43300 is a critical memory corruption vulnerability in Apple's image processing framework that affects iOS 18.6.1 and macOS systems. The vulnerability exists in the JPEG Lossless decompression code within...

CVE-2025-50472

CVE-2025-50472 ModelScope Ms-Swift ModelFileSystemCache Deserialization of Untrusted Data Remote Code Execution Vulnerability RCE PoC I uploaded a code repository containing a malicious .mdl file to ModelScope for testing purposes. It can be used directly during testing. The link is:...

CVE-2021-40978

CVE-2021-40978 mkdocs built-in dev-server directory traversal exploitation Mkdocs 1.2.2 allows directory traversal through the built-in dev-server which responds on port 8000. There is below some examples of successfully exploited paths: Impact Using this tecnique it is possible to fetch files...

ShadowSteal

ShadowSteal | CVE-2021-36934 Pure Nim implementation for exploiting CVE-2021-36934, the SeriousSAM Local Privilege Escalation LPE. Not OPSEC safe.... yet ;. I do not claim credit for the discovery of this exploit. Quick Start Build with Docker Getting started with ShadowSteal is now easier than...

CVE-2021-31805

CVE-2021-31805 PoC for CVE-2021-31805 Apache Struts2 This is the application used in the CVE-2021-31805 explanation article. Setup $ docker-compose build $ docker-compose up -d Verification Access http://localhost:8080/struts2-showcase-2.5.29/index.html and confirm that the Welcome page is...

CVE-2024-24919

Checkpoint POC Exploit for testing purposes to retrieve sensitive files from Checkpoint based on this article: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ I am not responsible for any abuse of this script, the intention here is for defenders to test their own devices...

CVE-2023-26360-adobe-coldfusion-rce-exploit

Critical vulnerabilities in Adobe Coldfusion CVE-2023-26359, CVE-2023-26360 and CVE-2023-26359 On March 8, 2023, Adobe released security updates to address critical vulnerabilities in Adobe ColdFusion, a popular web application development platform. These vulnerabilities, classified as improper...

monitorr-exploit-toolkit

Monitorr exploit toolkit RCE via unsecure file upload PHP reverse shell, webshell, etc. Administrator account creation via Authorization bypass Technical information leakage : Monitorr version, PHP version, System version & kernel, PHP config, etc. Exploit for CVE-2020-28872 and CVE-2020-28871...

CVE-2026-43637-cornac

CVE-2026-43637: Path Traversal Tar Slip in Cornac via extractarchive Severity: High, CVSS 4.0 8.8 , Critical, CVSS 3.1 9.1assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N Vector v4.0: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H Affected:...

CVE-2025-52691

CVE-2025-52691 SmarterMail Unauthenticated Arbitrary File Upload RCE Overview Critical unauthenticated arbitrary file upload allowing remote code execution. Field| Value ---|--- Product| SmarterMail Affected| Build 9406 and earlier CVSS| 10.0 Critical Type| Arbitrary File Upload Vector| HTTP...

FileSwitcherX

FileSwitcherX iOS 14.0-15.7.1 & 16.0-16.1.2 Install TrollStore AltStore Credits https://github.com/zhuowei/MacDirtyCow MacDirtyCow exploit https://github.com/haxi0/TrollLock-Reborn https://twitter.com/i41nbeer CVE-2022-46689 https://twitter.com/straighttamago FileSwitcherX...

SOC_287

SOC287 - Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Overview This repository contains a detailed walkthrough of the CVE-2024-24919 vulnerability affecting Check Point Security Gateways. The vulnerability allows arbitrary file read, potentially exposing sensitive system file...

Links.a

CVE-2023-44962 PoC for CVE-2023-44962 Analysis Uploading archive files containing symbolic links in upload-cover-image.pl can leak some of the content of the linked files. ... foreach my $dir @directories my $file; if -e "$dir/idlink.txt" $file = "$dir/idlink.txt"; elsif -e "$dir/datalink.txt"...

CVE-2024-36991

Splunk Path Traversal Exploit CVE-2024-36991 Description This is a Proof-of-Concept PoC exploit script for CVE-2024-36991 , a path traversal vulnerability affecting Splunk Enterprise on Windows versions below: 9.2.2 9.1.5 9.0.10 The vulnerability allows unauthenticated attackers to access sensiti...

CVE-2026-23499

CVE-2026-23499: Saleor vulnerable to stored XSS via Unrestricted File Upload Overview Field| Details ---|--- CVE ID| CVE-2026-23499 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products saleor/saleor Details Saleor allowed authenticated staff users or Apps to upload...

CVE-2022-24990

CVE-2022-24990 CVE-2022-24990 Information Disclosure + RCE All-in-One This PoC writes a file to the target, here it writes phpinfo. If you need other functionality, modify it yourself. Do not use for illegal purposes...

CVE-2024-3912

Why? Publishing because Mirai are a bunch of irritating twats that keep popping my honeypot with it - you're not the malware I am after. Fek off please. Here's their irritating malware distribution IP and defualt payload script. http://130.12.180.69/bins/kla.sh Description Asus router arbitrary...

timesketch

Timesketch Table of Contents 1. About Timesketch 2. Getting started 3. Community 4. Contributing About Timesketch Timesketch is an open-source tool for collaborative forensic timeline analysis. Using sketches you and your collaborators can easily organize your timelines and analyze them all at th...