CVE-2019-0708-poc

CVE-2019-0708 Big shout out to the Dox King Krebs and also the thief of inventions and all-purpose fraud, Kevin. https://www.youtube.com/watch?v=dQw4w9WgXcQ...

jackson

Analysis and Remediation of Security Vulnerabilities in Jackson core 2.13.5 CVE-2025-52999 SNYK-JAVA-COMFASTERXMLJACKSONCORE-15365924 SNYK-JAVA-COMFASTERXMLJACKSONCORE-15907551 GHSA-2m67-wjpj-xhg9 SNYK-JAVA-COMFASTERXMLJACKSONCORE-7569538 Sonatype-2022-6438 This branch...

CVE-2026-55200

🚨 CVE-2026-55200 - Critical libssh2 Out-of-Bounds Write Vulnerability 📌 Overview CVE-2026-55200 is a critical memory corruption vulnerability affecting the widely deployed libssh2 library. The flaw arises from improper validation of the SSH packet length field during packet processing, potentiall...

empty_list

emptylist - exploit for p0 issue 1564 CVE-2018-4243 iOS 11.0 - 11.3.1 kernel r/w @i41nbeer BUG: getvolattrlist takes a user controlled bufferSize argument via the fgetattrlist syscall. When allocating a kernel buffer to serialize the attr list to there's the following comment: / Allocate a target...

CVE-2026-51788

Security Advisory: CVE-2026-51788 Denial of Service DoS Vulnerability in cleverangeauth v0.1.10 CVE ID: CVE-2026-51788 Status: Assigned Date Discovered: 2026-04-27 Researcher: Aykhan Isgandarli Severity: High CVSS v3.1: 7.5 CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Produc...

CVE-2026-2636_PoC

CVE-2026-2636: CLFS.sys Unrecoverable State Leading to BSoD Overview CVE-2026-2636 is a vulnerability in the Windows Common Log File System CLFS driver CLFS.sys. An unprivileged user can trigger an unrecoverable system state by calling the ReadFile API on a handle opened via CreateLogFile. This...

CVE-2025-21420_POC

Diffing cleanmgr.exe The new version of cleanmgr.exe includes a call to the SetProcessMitigationPolicy function. With MitigationPolicy set to 16, corresponding to ProcessRedirectionTrustPolicy. Combined with Microsoft's description of CWE-59: Improper Link Resolution Before File Access 'Link...

CVE-2025-55182-poc-panel

This repository does not have a README...

poc-cve-2019-5736

PoC-CVE-2019-5736 PoC for CVE-2019-5736...

Important: Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update

An update for .NET 10.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

brotli: Out-of-Bounds Write in Google Brotli Decoder

A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or...

Important: Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

An update for .NET 8.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally. What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain the highest privileges on t...

CVE-2025-55182_PoC-Test-Server

CVE-2025-55182PoC-Test-Server CVE-2025-55182 React RCE Test Server...

tmux-fuzzing

Fuzzing Lab: Enhancing Fuzzing for tmux Software Security @ EPFL, Spring 2025 Abstract In this lab, we enhanced the fuzzing efforts for the tmux terminal multiplexer within Google's OSS-Fuzz infrastructure. We first established a baseline by evaluating the line coverage of the existing input-fuzz...

Important: Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

An update for .NET 9.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

EVIL-CVE-2021-23017-Update-2025

vulnerability in NGINX servers versions 0.6.18–1.20.0. The scripts aim to cause a Denial of Service DoS by sending malicious DNS responses, with enhancements to bypass firewalls. This is an improved version of the original PoC from M507/CVE-2021-23017-PoC . Warning : Use only with explicit writte...

tf-log4j-aws-poc

Readme Project Description This project files demostrate a proof-of-concept of log4j vulnerability CVE-2021-44228 on AWS using Terraform Infrastructure-as-a-code means. There are 2 demo in this project: 1. single-instance contains a vulnerable server, you can use your personal computer to exploit...

CVE-2025-5777

Thanks to WatchTowr and Nocerainfosec for the great POCS. This is a powershell version that was needed in our environment...

CVE-2025-61882-POC

CVE-2025-61882 Security Testing Tool 🚨 CRITICAL LEGAL WARNING See our blog post for technical details THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ╔══════════════════════════════════════════════════════════════╗ ║ ║ ║ 🚨 UNAUTHORIZED ACCESS TO COMPUTER SYSTEMS IS ILLEGAL 🚨 ║ ║ ║ ║ By using th...