Wallbreak

Wallbreak Download as APK This app demonstrates two high severity permanent denial-of-service vulnerabilities in Android's WallpaperManagerService that I discovered: CVE-2021-39670 and CVE-2021-39690. After running either exploit, the device will keep repeatedly crashing and rebooting. Write-up...

log4j-docker

Log4j Vulnerability - Proof-of-concept This repo has the docker and k8s YAMLs that are needed to recreate the log4j vulnerability seel below. Follow this blog to understand how all of this is tied together. Build Docker Images In case you need to customize the docker images cd /web-server make...

CVE-Vulnerability-Research-Exploit-Analysis

CVE-Vulnerability-Research-Exploit-Analysis A structured penetration testing project researching and executing real-world CVE exploits in a controlled sandbox environment. Targets included Windows 95 and Windows XP SP3 running across a multi-machine virtual network built with VirtualBox. Exploits...

AOSP-DownloadProviderHijacker

AOSP-DownloadProviderHijacker PoC Exploiting Permission Bypass in Android's Download Provider CVE-2018-9468 Security Advisory https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-Permission-Bypass-CVE-2018-9468.pdf More Information...

CVE-2026-3055

🔥 NetScalerBleed2: Critical Unauth Memory Overread in Citrix NetScaler CVE-2026-3055 Unauthenticated Out-of-Bounds Memory Read Memory Leak Only on appliances configured as SAML Identity Provider IdP 📋 Overview CVE-2026-3055 is a critical out-of-bounds read vulnerability CWE-125 in Citrix NetScale...

CVE-2024-4439

CVE-2024-4439 CVE-2024-4439 PoC...

CVE-2023-40448

CVE-2023-40448 poc for CVE-2023-40448 under construction ,This could probably be a piece for a jailbreak...

CVE-2017-1000112-PoC

CVE-2017-1000112Buffer overflow download iso image from https://old-releases.ubuntu.com/releases/16.10/ubuntu-16.10-server-amd64.iso gcc exploit.c -o exploit got root...

CVE-2023-34924

CVE-2023-34924 A buffer over flow vulnerability of H3CMagicB1STV100R012 router CVE info: • the name of an affected Product: H3C Magic B1STW B1STV100R012 router • the affected or fixed versions: affected version: H3C-Magic-B1STW - H3CMagicB1STV100R012. Fixed version: none • the CVE ID for the entr...

CVE-2022-36163

CVE-2022-36163 Suggested description A format string vulnerability was found in pdftoroff hovacui 1.1.0 pdf reader. A user can control the second parameter to sprintf which can lead to DoS or Information Disclosure for more attacks. sprintfcommand, output-postsave, fileno, fileno; Additional...

CVE-2023-29409

CVE-2023-29409 $ openssl genrsa -out ca-key.pem 2048 $ openssl req -x509 -new -nodes -key ca-key.pem -sha256 -days 100000 -out ca.pem \ -addext 'keyUsage=keyCertSign' \ -subj '/CN=Root CA' $ go run main.go server in the background $ go run main.go client causes high cpu load on client $ go run...

CVE-2025-29927

CVE-2025-29927 in Next.js 15.2.0 How to Run: git clone https://github.com/nyctophile0969/CVE-2025-29927 cd CVE-2025-29927 npm install [email protected] npm run dev...

poc-cve-2018-16875

This repository does not have a README...

credssp

credssp This is a poc code for exploiting CVE-2018-0886. It should be used for educational purposes only. It relies on a fork of the rdpy projecthttps://github.com/preempt/rdpy, allowing also credssp relay. Written by Eyal Karni, Preempt [email protected] Build Instructions Linux If you are...

CVE-2026-11499

🚨 CVE-2026-11499 Stack-Based Buffer Overflow in Tenda HG7 / HG9 / HG10 Routers 📖 Overview CVE-2026-11499 is a reported stack-based buffer overflow vulnerability affecting several Tenda router models , including: HG7 HG9 HG10 Successful exploitation may allow an attacker to trigger a crash, denial...

CVE-2025-63914

CVE-2025-63914 Public disclosure and patch for CVE-2025-63914: Zip bomb vulnerability in Cinnamon/kotaemon. Credit Wang Yuanrong Summary The mayextractzip function fails to enforce limits on ZIP decompression, allowing a malicious ZIP bomb to trigger excessive resource consumption and denial of...

CVE-2015-6637

CVE-2015-6637 PoC by Edward Hung Please backup your device while run PoC https://source.android.com/security/bulletin/2016-01-01.html...

cve-2021-21980-nuclei-poc

This repository does not have a README...

PyHmmm

PyHmmm What is this? This is a third party agent for Havoc C2 written in python. It is intended to be a basic PoC used to learn how to write custom Havoc agents, with its accompanying blog post...

[SECURITY] [DSA 6591-1] openjdk-25 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6591-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 28, 2026 https://www.debian.org/security/faq -...