904927 matches found
xzf
Introduction xzf is a simple PoC demonstrating how EXIF data can be used for command and control. xzf GETs an image from a predetermined URL, then reads the software tag for an authentication string. If the string matches, xzf will execute anything contained within the ImageDescription tag. Usage...
interactsh
An OOB interaction gathering server and client library Features • Usage • Interactsh Client • Interactsh Server • Interactsh Integration • Join Discord Interactsh is an open-source tool for detecting out-of-band interactions. It is a tool designed to detect vulnerabilities that cause external...
CVE-2021-1965
uses libwifi just for fun...
Priv2Admin
The idea is to "translate" Windows OS privileges to a path leading to: 1. administrator, 2. integrity and/or confidentiality threat, 3. availability threat, 4. just a mess. Privileges are listed and explained at: https://learn.microsoft.com/en-us/windows/win32/secauthz/privilege-constants If the...
CVE-2026-53918
The odhcpd DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt is vulnerable to a heap-use-after-free (UAF) read in its DHCPv6 IA handler prior to version 25.12 . The issue occurs because the handler maintains a per-message first lease pointer; an adjacent-network client can craft a D...
CVE-2023-38831-POC
CVE-2023-38831-POC Proof-of-concept of CVE-2023-38831 Note: The "GTA Leak" file isn't real. It's just zeros without ones "What should i click? The folder or the file?"...
PoC-CVE-2021-4034
PoC-CVE-2021-4034 PoC reference https://github.com/arthepsy/CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Usage: gcc PoC.c -o PoC ./PoC...
CVE-2019-1253
CVE-2019-1253 AppXSvc Arbitrary File Security Descriptor Overwrite EoP I have independently reported this vulnerability to MSRC, however, my submission turned out to be a duplicate due to the fact that the fix for CVE-2019-1253 also addressed this issue. My PoC differs from the ones created by...
CVE-2018-16712
CVE-2018-16712 PoC Code for CVE-2018-16712 You can find out more @ https://downwithup.github.io/CVEPosts.html Vulnerable Software Download @: https://www.iobit.com/en/advancedsystemcarefree.php...
CVE-2025-32023
CVE-2025-32023 PoC & Exploit for CVE-2025-32023 GHSA-rp2m-q4j6-gr43 / PlaidCTF 2025 "Zerodeo" Repro / Patch Tested against redis:7.4.2-alpine3.21@sha256:02419de7eddf55aa5bcf49efb74e88fa8d931b4d77c07eff8a6b2144472b6952 Affects Redis versions = 2.8. Patched on 8.0.3, 7.4.5, 7.2.10, 6.2.19, see...
vvdecapp Component Buffer Overflow DoS
The vulnerability of the setBufferingPeriodSEI function in the vvdecapp VVdeC component is related to reading data beyond the buffer’s capacity. Exploiting this vulnerability could allow an attacker to cause a service failure or gain access to protected information...
CVE-2026-57210
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the trustedproxies option is configured, heimdall extracts client IP addresses from the Forwarded for= parameter and X-Forwarded-For headers and exposes them as...
CVE-2026-115728
@hapi/content from 6.0.1 before 6.0.3 contains a regular expression denial of service vulnerability in Content.disposition caused by an incomplete fix for CVE-2026-35213. Unauthenticated remote attackers can send multipart uploads with a long Content-Disposition parameter lacking an equals sign,...
CVE-2026-112854
Deserialization of Untrusted Data vulnerability in axiomthemes Holistic Center holistic-center allows Object Injection.This issue affects Holistic Center: from n/a through 1.2.6...
CVE-2026-112855
Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy: from n/a through 1.3.5...
CVE-2026-112856
Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This issue affects Vagabonds: from n/a through 1.3.10...
CVE-2026-112857
Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo allows Object Injection.This issue affects Reprizo: from n/a through 1.0.8...
CVE-2026-112858
Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects Rhodos: from n/a through 1.3.3...