vulnerability-poc

漏洞 PoC 仓库 精选的高危 CVE 概念验证（PoC）代码、测试实验室和防护规则——专为授权安全测试、渗透测试、CTF 挑战和安全研究 而构建。 由 SeekersLab 团队维护。每个条目均附带仅用于检测的 PoC 脚本、Docker 测试实验室（含存在漏洞和已修复的应用）、双语（英语 / 한국어）文档以及可直接部署的防护规则。 ⚠️ 免责声明 本代码仅供教育目的、授权渗透测试、CTF 挑战和安全研究使用。 请勿在未经明确书面授权的情况下针对任何系统使用这些 PoC。未经授权访问计算机系统属于违法行为。 CVE 索引 2022 年 CVE CVE ID| 严重性| 厂商| 描述...

May 2026 Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (Multiple CVEs)

Summary Ivanti has released updates for Ivanti Endpoint Manager Mobile EPMM which addresses five high severity vulnerabilities. We are aware of a very limited number of customers exploited with CVE-2026-6973. Successful exploitation requires Admin authentication. If customers followed Ivanti’s...

SUSE: Security Advisory (SUSE-SU-2026:0457-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Product Release Advisory - VMware Tanzu Greenplum Backup and Restore 1.32.2

Product Release Advisory - VMware Tanzu Greenplum Backup and Restore 1.32.2 Advisory ID | TNZ-2025-0406 ---|--- Tanzu Issue Date | 2025-12-19 Updated on | | Highest Score CVE from list below advisory details ---|--- Severity | High CVSS V4 Vector | Unavailable CVSS V4 Score | Unavailable Sev:...

Cisco Zero-Day in AnyConnect Secure Mobility Client Remains Unpatched

Cisco has disclosed a zero-day vulnerability – for which there is not yet a patch – in the Windows, macOS and Linux versions of its AnyConnect Secure Mobility Client Software. While Cisco said it is not aware of any exploits in the wild for the vulnerability, it said Proof-of-Concept PoC exploit...