905837 matches found
DSCourier_BOF
DSCourier BOF This is a BOF implementation of Dylan Davis and Matthew Schramm's DSCourier project. It uses WinGet's COM interface to execute arbitrary powershell code in a Microsoft signed and trusted process. Their full research blog can be found here. Unlike most projects I release, this is NOT...
Apache-spark-CVE-2022-33891
Apache-spark-CVE-2022-33891 Apache Spark RCE - CVE-2022-33891 PoC Follow us Vulnmachines Platform YouTube Twitter Facebook LinkedIn...
CVE-2025-6558-Proof-Of-Concept
CVE-2025-6558-Proof-Of-Concept...
CVE-2023-5178
CVE-2023-5178 The exploit for CVE-2023-5178: NVMe-oF-TCP vulnerability, which is a logic error in NVMe-oF-TCP driver during the handle of corrupted Initialize Connection Request. It leads to racy double-free in kmalloc-96 , which can be exploited to gain LPEsee demo below. The exploit targets...
CVE-2022-48474_CVE-2022-48475
CVE-2022-48474 & CVE-2022-48475 PoC & exploits for CVE-2022-48474 & CVE-2022-48475 "Control de Ciber" is a Cybercafe management software. Multiple Denial-of-Service DoS vulnerabilities in versions prior to 1.650. An unauthenticated remote attacker can send a carefully crafted request that lead to...
heartbleed-proof-of-concept
Heartbleed CVE-2014-0160 Setup You will require docker in order to perform the setup. The exploit, dynamically generates the random bytes from the Client Hello message, therefore you will need to link the library when building the executable. The required package to be installed, in order to link...
pdfjs-vuln-demo
PDF.js Vulnerability Demo Project This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js pdfjs-dist library reported in CVE-2024-4367 Getting Things Running Fork and clone from this repository npm install npm run dev Testing Things Out...
log4j-docker
Log4j Vulnerability - Proof-of-concept This repo has the docker and k8s YAMLs that are needed to recreate the log4j vulnerability seel below. Follow this blog to understand how all of this is tied together. Build Docker Images In case you need to customize the docker images cd /web-server make...
CVE-2026-36958
CVE-2026-36958: Denial of Service via Concurrent HTTP Requests CVE ID: CVE-2026-36958 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: U-SPEED Product: U-SPEED Router Firmware Version: V1.0.0 CWE: CWE-400 - Uncontrolled Resource Consumption Description The U-SPEED Router firmware V1.0.0 is...
TimeException
Disclaimer This tool is provided for educational purposes only. Any actions and activities related to the material contained within this repository are solely your responsibility. Misusing this tool can result in criminal charges against the persons in question. The author will not be held...
Sharepoint-cve-2023-29375-incident-response
SOC Incident Analysis: Microsoft SharePoint Server Elevation of Privilege CVE-2023-29375 An in-depth security investigation of a critical exploit and enumeration attempt targeting a Microsoft SharePoint server. Incident Overview Alert Name: SOC227 - Microsoft SharePoint Server Elevation of...
CVE-2026-32707-PX4-Autopilot-tattu_can-Stack-Buffer-Overflow-DoS-
-orange CVE-2026-32707 - PX4-Autopilot tattucan Stack Buffer Overflow DoS ╔════════════════════════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ███╗ ██╗██╗ ██╗ █████╗ ███╗ ███╗███████╗██████╗ ║ ║ ██╔══██╗██╔══██╗████╗ ██║╚██╗ ██╔╝██╔══██╗████╗...
CVE-2021-22893
CVE-2021-22893 Proof-of-Concept PoC script to exploit Pulse Secure CVE-2021-22893. Usage Achieves RCE on Pulse Secure VPNs chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.sh -l ./exploit.sh -l IPList.txt...
openssh_dos
Since OpenSSH servers don't restrict the login password length, you can cause these servers to crash by sending very long passwords which use massive amounts of a the server's CPU to hash. This vulnerability is known as CVE-2016-6515. My POC can be downloaded here you will need to unzip Usage:...
CVE-2025-24813
Testing any tomcat version to see whether that version is vulnerable to CVE-2025-24813 This POC allow you to test any tomcat version to verify whether that version is vulnerable to CVE-2025-24813 under the vulnerable conditions, in Unix environments tested on a Ubuntu machine. Note: tested using...
hakoriginfinder
hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...
CVE-2024-21683-RCE
Usage python poc.py -u http://localhost:8090 -user admin -pass admin -f exploit.js -n test -p http://127.0.0.1:8080 POC...
shellshocker-pocs
Shellshocker - Repository of "Shellshock" Proof of Concept Code Collection of Proof of Concepts and Potential Targets for ShellShocker Wikipedia Link: https://en.wikipedia.org/wiki/Shellshock%28softwarebug%29CVE-2014-7186andCVE-2014-7187Details Please submit a pull request if you have more links ...