CVE-2020-26259

CVE-2020-26259 CVE-2020-26259: XStream1.4.14 is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights. https://x-stream.github.io/CVE-2020-26259.html XStream 1.4.14 pom.xml com.thoughtworks.xstream xstream 1.4.14 poc...

BadHost-CVE-2026-48710-Exploit

BadHost — CVE-2026-48710 Scanner Detection-only scanner for the BadHost auth-bypass in Starlette / FastAPI — where auth middleware reads request.url.path instead of request.scope"path", allowing a crafted Host header to smuggle an allowlisted path and bypass authentication. GET /admin HTTP/1.1...

ReflectiveDLLInjection

About Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process. As such the library is responsible for loading itself by implementing a minimal Portable Executable PE fi...

CVE-2019-12594

CVE-2019-12594 This is a PoC for CVE-2019-12594, a vulnerability in DOSBox 0.74-2. Launching a calculator on the host from DosBox 0.74-2 The PoC for this vulnerability has been tested with the following configuration: DOSBox 0.74-2 Debian 10 amd64 Libc6 2.28-10...

CVE-2025-32462

CVE-2025-32462 - Sudo Host Bypass Exploit Original Discovery This vulnerability was discovered by Rich Mirch. More details can be found at: https://cxsecurity.com/issue/WLB-2025070022 About This script is an exploit for CVE-2025-32462, allowing privilege escalation by bypassing sudo's host...

CVE-2020-3452-PoC

CVE-2020-3452 hello Guys This is a simple script to download the nmap NSE script and put in NSE modules file and run the nmap command with and hosts you want Put your host list in list.txt file Thanks...

smt878u-ionstack-poc

smt878u-ionstack-poc !CAUTION THIS PROJECT IS UNFINISHED — IT DOES NOT WORK YET. There is no working root on any device as of 2026-10-06. Do not expect the quick-start below to succeed. Read Current status before building or running anything. !WARNING STATUS: WORK IN PROGRESS — ring 1 not landed...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

CVE-2025-9074

Description Vibe coded a small exploit script in pure Bash without dependencies on tools that might not be installed. The script talks to the internal Docker API, creates and starts a new container, mounts the host C drive and then executes a command inside that. The output is streamed back to th...

CVE-2021-27404

Authenticated Host Header Injection - Askey Internet Fiber Modem Vendor: Askey Software Version: BRSVg11.11RTFTEF001V6.54V014 Model: RTF8115VW Vulnerable Header: Host Not tested in other model/version. Impact: An attacker could take advantege on that vulnerability to redirect user to a fake Login...

CVE-2021-28476

CVE-2021-28476: Hyper-V vmswitch.sys arbitrary pointer dereference from guest VM Summary: A Hyper-V guest virtual machine can trigger a Denial-of-Service condition on its underlying host due to unsafe parsing of input by the VmsIfrInfoParamsOIDSWITCHNICREQUEST function in vmswitch.sys. The crash ...

CVE-2023-25157

CVE-2023-25157 This is a simple Python Script to Find the Latest GeoServer SQL Injection Vulnerability. You can use the Scripts on hosts to check for infected path. Installation: 1. git clone https://github.com/0x2458bughunt/CVE-2023-25157/ 2. cd CVE-2023-25157 3. chmod +x geoserver.sh Note: You...

CVE-2022-22965

CVE-2022-22965 Exploit Of Spring4Shell! Usages python3 exploit.py Target Host...

CVE-2021-21402

CVE-2021-21402 Jellyfin Arbitrary File Read Vulnerability Overview Jellyfin is a free software media system that controls and manages media and streaming. It is an alternative to Emby and Plex, delivering media from a dedicated server to end-user devices through multiple applications. Jellyfin...

starlette-host-header-lab

Starlette Host-Header URL Confusion Lab X41-2026-002 A self-contained, containerized training lab reproducing the Starlette authentication-bypass vulnerability disclosed by X41 D-Sec. Advisory: X41-2026-002 GHSA: GHSA-86qp-5c8j-p5mr CWE: 436 — Interpretation Conflict / Untrusted Input in Function...

ShodanHat

Dependencies You need to install shodan with pip install shodan or easyinstall shodan. You need to install python-nmap with pip install python-nmap. You need to set your API Key in the 'constantes.py' file. Options -h, --help show this help message and exit -i IP, --ip=IP info about one host -l...

CVE-2026-99165

In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate output stream after association connect wait When message interleaving is enabled, the first send waits for association establishment before building its data chunks. The wait drops the socket lock, and handshake...

umap

umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...

CVE-2018-13257

Blackboard Learn CAS Ticket Host Header Spoofing An authentication module within Blackboard Learn is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation. A CAS service ticket is intended for only a specific service , but Blackboard Learn do...