POC-CVE-2017-12615-or-CVE-2017-12717

POCCVE-2017-12615 CVE-2017-12615 for tomcat server Original POC: https://www.exploit-db.com/exploits/42953/...

Silhouette

Silhouette By Gabriel Landau and Mark Mager at Elastic Security. From Hide Your Valuables — Mitigating Physical Credential Dumping Attacks presented at Shmoocon 2023. Slides here. Keeping LSA secrets out of physical memory Silhouette is a POC that mitigates the use of physical memory to dump...

advisories

Enable Security Advisories This repository contains reproduction code, proof-of-concept scripts, and supporting files for security advisories published by Enable Security. Full advisories: https://www.enablesecurity.com/advisories/ The complete advisory content descriptions, impact, timeline, etc...

interactsh

An OOB interaction gathering server and client library Features • Usage • Interactsh Client • Interactsh Server • Interactsh Integration • Join Discord Interactsh is an open-source tool for detecting out-of-band interactions. It is a tool designed to detect vulnerabilities that cause external...

cve-2014-0050

cve-2014-0050 CVE-2014-0050 Vulnerable site sample This project aims to demonstrate the CVE-2014-0050 exploitation for educational purpose. For more informations, see : https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2014-0050--Exploit-with-Boundaries,-Loops-without-Boundaries/...

CVE-2026-29115

CVE-2026-29115 — Dahua Authenticated Remote Denial of Service Advisory type: Vendor-coordinated security disclosure CVE ID: CVE-2026-29115 Vendor: Dahua Technology Published: 2026-06-10T06:08:21 UTC Last Modified: 2026-06-10T06:08:21 UTC Source: Dahua Product Security Incident PSI Trust Center...

cve-2022-21882-poc

cve-2022-21882-poc lpe poc for cve-2022-21882...

QuarkPoC

QuarkPoC iOS Application w/Implementation of CVE-2024-27804...

CVE-2024-48208

CVE-2024-48208 The repo contains all the work surrounding the development of the PoC for how a simple OOBOut-of-bound read can result in jail escapes as well as broken access control. About the Vulnerability The orginial CVE Description is as follows: The Github PR on the official repo details ou...

CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC

🛡️ CVE-2026-57588 - Nessus SQL Injection Exploitation Framework 📋 Table of Contents Overview Vulnerability Details Features Installation Quick Start Usage Examples Payload Types Advanced Scenarios Reporting Troubleshooting Security Considerations License 🔍 Overview CVE-2026-57588 is a critical SQL...

CVE-2024-20931

CVE-2024-20931 The Poc for CVE-2024-20931 Vulnerability Analysis A New Attack Surface for JNDI Injection - CVE-2024-20931 Analysis...

CVE-2024-9047-PoC

This script is only for authorized system testing. Please cite the source if referenced. For more PoCs, see https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Batch testing: python poc.py -f url.txt Single testing: python poc.py -u your-ip...

cve-2022-21907

CVE-2022-21907 Golang Application by 1vere$k CVE-2022-21907 - Double Free in http.sys driver. Summary This is a multithreading Golang application wich allows make requests on few targets simultaneously. Not very productive with the POST requests but it provides nearly 30% of speed comparing to a...

MS16-051-poc

CVE-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 VBScript Memory Corruption in IE11 Tested on Windows 10 IE 11. Write-up https://www.deamwork.com/archives/patch-analysis-of-cve-2016-0189.orz6 To run 1. Download support/.dll or compile .cpp for yourself and exploit/.html to a directory. 2...

WSMan-WinRM

WSMan-WinRM A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object. Background For background information, please refer to the following blog post: WS-Management COM: Another Approach for WinRM Lateral Movement Notes...

poc-cve-2019-5736

PoC-CVE-2019-5736 PoC for CVE-2019-5736...

SQLC2

SQLC2 SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent. At its core, SQLC2 is just a PowerShell script, a TSQL script, and a few tables in an SQL Server instance that tracks agents, commands, and...

PyFlooder

PyFlooder An HTTP Flood Python script that could stop a normal website in 10s How does it work ? It generates a configurable number of random GET requests and sends them to the target Usage pyflooder.py...

CVE-2026-89847

A flaw was found in the Linux kernel's qla2xxx SCSI driver. A double completion scenario can occur during the asynchronous I/O control block IOCB timeout handling. This can lead to a use-after-free vulnerability, where the system attempts to write to memory that has already been released. A local...

CVE-2026-56164-EXP

Microsoft SharePoint Server Elevation of Privilege - CVE-2026-56164 Functional unauthenticated EOP exploit. Overview Missing authentication for critical function CWE-306 in SharePoint Server user profile and site collection endpoints. Allows remote attackers to escalate from anonymous to Site...