CVE-2026-25643

Frigate NVR ≤ 0.16.3 Blind RCE Exploit CVE-2026-25643 PoC 📜 Description This Python exploit targets a critical configuration manipulation vulnerability in Frigate NVR versions up to 0.16.3 both authenticated and unauthenticated paths. By injecting a malicious go2rtc stream and a fake camera entry...

BiblioRCE

An oversight within BiblioCraft which allows restricted server-side file manipulation. This method only requires BiblioCraft! Not too much trickery and no other mods are required to achieve code execution! CoreTweaks The original writeup focused on CoreTweaks can be found here. I recommend you re...

Agent-Tesla-APC-Injection-Token-Manipulation-Registry-Persistence-Analysis

1. Native API & APC Injection The x64dbg memory dump reveals that Agent Tesla uses Native API NT API calls for low-level operations, including APC Asynchronous Procedure Call injection. Key Functions Observed: NtQueueApcThread – Injects code into a target thread via APC. NtReadVirtualMemory –...

Poison-HTB-Report

Poison-HTB-Report Privilege Escalation on HTB "Poison" using PwnKit CVE-2021-4034 HTB "Poison" - Privilege Escalation Report BugVex This repository contains a full vulnerability report on the Hack The Box machine Poison. 🔍 Exploit Summary CVE: CVE-2021-4034 PwnKit Technique: Privilege escalation...

WireBug

WireBug WireBug is a tool set for Voice-over-IP penetration testing. It is designed as a wizard which makes it easy to use. The tools are build for single using too, so every tool is its own python or bash program. Installation Read the Installation Guide in the wiki. Tools FullBridge: This is a...

NVMS-1000-Directory-Traversal-Bash

NVMS-1000-Directory-Traversal-Bash Directory Traversal Exploit written in Bash for NVMS-1000 CVE-2019-20085. Usage ./cve-2019-20085-poc.sh -u TARGETURL -f TARGETFILE Example ./cve-2019-20085-poc.sh -u http://127.0.0.1/ -f path/to/file.txt Disclaimer This POC was created for educational purposes...

CVE-2025-8110

CVE-2025-8110 Gogs Repository Symlink Remote Code Execution Made by oguiii Table of Contents Overview Features Requirements Installation Usage Exploit Workflow Technical Analysis Proof of Concept Demo Affected Versions Mitigation Detection Disclaimer License Overview CVE-2025-8110 is a critical...

CVE-2026-53625-GLPI-PoC

CVE-2026-53625 - GLPI Privilege Escalation via authtype Manipulation PoC 📌 Overview This repository provides an ethical Proof-of-Concept PoC for CVE-2026-53625 , a High severity privilege escalation vulnerability in GLPI affecting all versions from 0.70 through 11.0.7. A low-privilege user...

Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway

Summary Security Vulnerabilities affect IBM Voice Gateway. The vulnerabilities below have been addressed. Vulnerability Details CVEID:CVE-2026-101898 DESCRIPTION: Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does not...

CVE-2024-30088

CVE-2024-30088 This repository contains a Proof of Concept PoC written in Python for the vulnerability CVE-2024-30088. This code is an attempt to replicate the vulnerability as a technical exercise, with purely educational and demonstrative purposes, showing how Python somehow "struggles" also in...

CVE-2022-29361_Werkzeug_Client-Side-Desync-to-XSS

Credits to @kevin-mizu https://github.com/kevin-mizu/Werkzeug-CVE-2022-29361-PoC/tree/main for details read: https://mizu.re/post/abusing-client-side-desync-on-werkzeug Tested On Chromium 119.0.6045.123 built on Debian trixie/sid, running on Debian kali-rolling...

CVE-2025-6218-POC

CVE-2025-6218 Proof of Concept POC Overview This repository contains a simple Proof of Concept POC for CVE-2025-6218 , demonstrating the exploitation of a vulnerability involving WinRAR’s handling of archive extraction paths. The POC batch script creates a ZIP archive that places a batch file int...

CVE-2026-14840

CVE-2026-14840 — YOP Poll 7.0.6 Vote Limit Bypass Author: nullwhisper Use case: authorized security research / vulnerability validation only. What is this? YOP Poll plugin versions 7.0.6 enforce a one-vote-per-IP limit. The problem is that to obtain the client IP it checks HTTPCLIENTIP and...

vulnerable-nextjs-14-CVE-2025-29927

CVE-2025-29927 Authorization Bypass reproduction This repository is a reproduction of the CVE-2025-29927 vulnerability in the next package How to reproduce 1. Follow the steps below to clone, and run the Next.js application 2. Test authorization denies access to the /api/hello endpoint $ curl...

cve-2026-22732-poc

CVE-2026-22732 — Proof of Concept Spring Security silently drops HTTP response security headers. Demo / educational use only; run it against nothing but this local app. | ---|--- CVE| CVE-2026-22732 CWE-425, published 2026-03-19 CVSS 3.1| 9.1 CRITICAL — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Direct...

novahot

novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...

CVE-2022-22965

Spring Boot CVE-2022-22965 Docker PoC for CVE-2022-22965 with Spring Boot version 2.6.5 🚀 Getting Started 1. Download the distribution code from https://github.com/itsecurityco/CVE-2022-22965/archive/refs/heads/master.zip and unzip it. 2. Run docker compose up --build to build and start the...

CVE-2024-53677

CVE-2024-53677: Apache Struts path traversal to RCE vulnerability A critical security vulnerability, identified as CVE-2024-53677 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code execution...

spring-shell-vuln

spring-shell-vuln Spring4Shell: Spring core RCE vulnerability Spring has Confirmed the RCE in Spring Framework. The team has just published the statement along with the mitigation guides for the issue. Now, this vulnerability can be tracked as CVE-2022-22965. Some information about the Spring4She...

CVE-2025-63700

CVE-2025-63700 OAuth Authentication Bypass in Clerk-js 5.88.0 Affected Product Vendor : Clerk Inc. clerk.dev / clerk.com Product : Clerk-js @clerk/clerk-js Affected Version : 5.88.0 Impact : OAuth Authentication Bypass CWE-290 : Authentication Bypass by Spoofing Bug Author Hasnat Ibrahim Nishat -...