DLLirant

DLLirant DLLirant is a tool to automatize the DLL Hijacking and DLL Proxying researches on a specified binary. Final PoC output when a DLL Hijacking is found: Old Live Demo similar to the new version How to install Install LLVM for Windows x64 LLVM-version-win64.exe:...

CVE-2020-0601-EXP

CVE-2020-0601-EXP This resource is the author's reproduction of the Microsoft signature certificate vulnerability CVE-2020-0601, implemented by combining related resources and articles. It is recommended that you read the author's blog to understand the ECC algorithm, Windows verification...

CVE-2020-14368

CSWSH-THEIA-CVE-2020-14368 Report target: Eclipse CHE deployment available on che.openshift.io Vulnerability type: Cross-site websocket hijack Discovery date: 2020-04-08 Author: Robin Duda codingchili@github Summary The /services websocket endpoint in Eclipse CHE adn Theia is vulnerable to...

CVE-2025-68930

🔍 Analysis of CVE-2025-68930: WebSocket Hijacking Vulnerability in Traccar The CVE-2025-68930 exposes a critical Cross-Site WebSocket Hijacking CSWSH vulnerability in Traccar , the open-source GPS tracking system. Below are the key details: 🛡️ Vulnerability Details Affected endpoint : /api/socket...

CVE-2025-50754-PoC

CVE-2025-50754 Stored XSS to Remote Code Execution in a PHP-Based CMS Platform Summary A PHP-based CMS platform version 5 contains a stored Cross-Site Scripting XSS vulnerability in the "Report" feature. When an administrator views a user-submitted report, malicious JavaScript is executed within...

CVE-2025-27237

CVE-2025-27237 Local privilege escalation vulnerability in Zabbix Agent/Agent2 for Windows via OpenSSL configuration file hijacking. Overview Field| Value ---|--- CVE ID| CVE-2025-27237 CVSS v4.0| 7.3 HIGH CWE| CWE-427: Uncontrolled Search Path Element Type| Local Privilege Escalation Vendor|...

agentbox

🛡️ AgentBox The open-source sandboxed runtime for AI agents Run AI agents with confidence. Every agent gets its own permission scope, credential vault, audit trail, and kill switch. Why AgentBox exists On January 27, 2026, CVE-2026-25253 became the first CVE ever assigned to an agentic AI system. ...

CVE-2025-61922-PoC

CVE-2025-61922 Exploit: PrestaShop Checkout Account Takeover A simple, educational proof-of-concept script demonstrating the zero-click account takeover vulnerability in the PrestaShop Checkout module CVE-2025-61922. ⚠️ Legal & Ethical Notice: Use Responsibly This tool is for educational purposes...

CVE-2026-50980

CVE-2026-50980: DNS-Based Cross-Site Scripting XSS & Session Hijacking in oPanel Overview CVE ID: CVE-2026-50980 Product: oPanel Affected Versions: v1.20.25 Vulnerability Type: Stored Cross-Site Scripting XSS via DNS / Session Hijacking Severity: High CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N...

CVE-2024-50962

Cross-Site Scripting XSS in DonWeb Ferozo Webmail CVE-2024-50962 Description A Cross-Site Scripting XSS vulnerability in Ferozo Webmail v1.1 allows attackers to execute arbitrary scripts via the Identities and Automatic Responses components. This vulnerability can be used to hijack user sessions,...

CVE-2020-3433

PoCs for CVE-2020-3433, CVE-2020-3434, and CVE-2020-3435 PoCs and technical details for the three vulnerabilities found on Cisco AnyConnect Secure Mobility Client for Windows in May 2020: CVE-2020-3433 - High CVSS Score 7.8 - a local privilege escalation CVE-2020-3434 - Medium CVSS Score 5.5 - a...

CVE-2026-102489

CVE-2026-102489: Zammad Unauthenticated Remote Code Execution This repository contains a proof of concept for CVE-2026-102489, an unauthenticated remote code execution vulnerability in Zammad. The exploit chains a WebSocket information disclosure flaw into authenticated session takeover and...

CVE-2022-45436

CVE-2022-45436 Reflected Cross Site Scripting leading to session hijacking in pandorafms Exploit Title: Reflected Cross Site Scripting Date: 15/02/2023 Exploit Author: Damodar Naik Vendor Homepage: https://pandorafms.com/en/ Software Link: https://github.com/pandorafms/pandorafms Version: Tested...

CVE-2025-29015

CVE-2025-29015 - Internet Banking System 2.0.0 Stored XSS in pagesaccount.php Description A Stored Cross-Site Scripting XSS vulnerability exists in Code Astro Internet Banking System 2.0.0 via the name parameter in /admin/pagesaccount.php. Malicious JavaScript code can be injected and stored in t...

DLHell

DLHell DLHell performs DCOM local & remote Windows DLL Proxying. Install The following packages are required might depend on your distro, the following example is for Debian 12: sudo apt install -y g++-mingw-w64-x86-64-win32 binutils-mingw-w64-x86-64 Install pip dependencies: pip3 install -r...

CVE-2024-57427

CVE-2024-57427 - Reflected Cross-Site Scripting XSS PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting XSS. Multiple endpoints improperly handle user input, allowing malicious scripts to execute in a victim’s browser. Attackers can craft malicious links to steal...

lvi-lfb-attack-poc

PoC for the LVI-LFB Control Flow Hijacking attack CVE-2020-0551 This repository holds the sources for the LVI-LFB Control Flow Hijacking attack PoC. Contents lvi-cfh-poc - hijack the control flow of another process via line-fill buffer spraying whitepaper Prerequisites 1. Visual Studio 2015 2. A...

CVE-2017-8464-exp-generator

CVE-2017-8464-exp-generator this tool can generate a exp for cve-2017-8486, it is developed by python Usage: CVE-2017-8464.py dllname then there will generate 26 files name as A.lnk,B.lnk,....,Z.lnk then you just need to put the dll file into any of the disk A:/,B:/,....,Z:/ for example, if you p...

CVE-2025-6563

MikroTik Hotspot Login Page Reflected XSS Vulnerability Advisory Overview A reflected Cross-Site Scripting XSS vulnerability was discovered in the MikroTik RouterOS Hotspot login page. The vulnerability is triggered via the dst URL parameter, which improperly sanitizes input, allowing malicious...

CVE-2025-46178

CVE-2025-46178 Cross-Site Scripting XSS vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project. This allows remote attackers to inject arbitrary JavaScript in the context of a victim s browser session by sending a crafted URL, leading to session hijacking or...