UniBLEed

UniBLEed Unitree G1 RCE PoC & Scripts CVE-2026-76639 / CVE-2026-76640 technical details at boschko.ca/g1-ble-rce/ Use this repository only with robots, accounts, and networks you are authorized to test. The active chains can change the robot's WiFi configuration, stop or restart services, crash...

Exploit-Development

Developed Exploits This repository will contain any exploit or proof of concept code I release publicly. In addition to this, I will include Metasploit Modules, and ported exploits. Metasploit Modules This directory will contain all Metasploit modules I've developed. Note that code within this...

the-art-of-pivoting

The Art of Pivoting Techniques for Intelligence Analysts to Discover New Relationships in a Complex World PDF HTML EPUB Markdown Abstract This book explores how intelligence and cyber-security analysts can uncover hidden links between threat actor infrastructure and ongoing investigations by...

CVE-2025-30712-_PoC

This repository does not have a README...

CVE-2023-22077

CVE-2023-22077 CVE Proof Of Concept: https://databasesecurityninja.wordpress.com/2025/08/04/cve-2023-22077-denial-of-service-from-pdb-level-against-container-level-dos-breaking-pdb-isolation/...

CVE-2026-115892

A flaw was found in Wasmtime. A malicious WebAssembly guest can cause a Denial of Service DoS by triggering an unhandled host runtime panic. When handling asynchronous streams or futures exchanged between the host and guest, Wasmtime fails to properly validate payload data types upon their return...

CVE-2026-98842

A flaw was found in the Linux kernel's module loading subsystem. When an error occurs during module initialization, the kernel fails to propagate the error code and incorrectly reports a successful load after the module has already been cleaned up. A local privileged user could trigger this...

CVE-2020-25705

CVE-2020-25705 PoC for CVE-2020-25705 POC-2020-25705 This is a work in progress. I'll finish it on Monday :p but there is likely enough here already for you to complete it...

IngressNightmare-PoC

This repository does not have a README...

active_c2_ioc_public

+OPTIONS: ^: +TITLE: Active C2 IOCs Note Be careful with the firstseen/lastseen dates in each entry. Don't judge based on just an IP address...

ExploitDev

ExploitDev Various tools, PoCs and experiments related to my blog at https://www.forrest-orr.net/...

cve-2022-33891

cve-2022-33891 Usage: pip3 install requests If you do not use the -d parameter, the dnslog domain name will be automatically applied for you. 如果你不使用-d参数，则会自动为您申请dnslog域名。 python3 cve202233891poc.py -u http://127.0.0.1 python3 cve202233891poc.py -f url.txt python3 cve202233891poc.py -u...

CVE-2025-8671

CVE-2025-8671 - PoC DoS lighttpd HTTP/2 Author : @abiyeenzo ⚠️ Warning This project is provided for educational purposes only. Running the PoC against third-party servers may constitute an illegal cyberattack and lead to criminal prosecution. Only use this script on your test environments or local...

CVE-2026-66749-Unchecked-Room-Lookup-Leads-to-Server-Crash-Let-s-Chat-

Security Advisory: Unchecked Room Lookup Leads to Server Crash Let's Chat Assigned CVE ID: CVE-2026-66749 Summary One HTTP request from any logged-in account shuts down the Let's Chat server process. GET /messages takes a room parameter, looks that room up by id, and then calls a method on the...

android-kernel-exploitation

Android Kernel Exploitation Objective The objective of this workshop is to get started with kernel vulnerability analsysis and exploitation in Android platform. Usage Clone the repository git clone https://github.com/cloudfuzz/android-kernel-exploitation /workshop Github Pages URL...

CVE-2019-0708

Leaving for a wedding tomorrow, if I can't find anything then someone else take the reins Going to drop the crash PoC here Friday if there isnt one public already... Maybe the following week, depending on if the vulnerable numbers drop consistently or not. https://vimeo.com/339425966 I'm not...

CVE-2021-44142

CVE-2021-44142 Vulnerability Checker A tool to check if a Samba server is vulnerable to CVE-2021-44142 Background CVE-2021-44142 is a heap out-of-bounds read and write in Samba's vfsfruit module used at Pwn2Own Austin 2021 against the Western Digital PR4100. It was first discovered by Nguyễn Hoàn...

CVE-2026-98839

A flaw was found in the Linux kernel's virtual terminal selection subsystem. When pasting console selections, a race condition can occur if another process concurrently replaces the selection buffer with shorter content while the operation is temporarily paused. This situation causes an integer...

CVE-2025-24990

CVE-2025-24990 — Windows Untrusted Pointer Dereference EoP Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. A privileged Windows component dereferences a pointer it receives from an untrusted context without validating it — giving a...

Laravel relationship inclusion can trigger unauthorized data destruction

A vulnerability in how relationship inclusion is processed on certain read endpoints. Under specific conditions, a request to a read-only endpoint can be crafted to trigger a destructive database operation on a related table, rather than simply retrieving data. Impact A user with only read access...