CVE-2018-4150

CVE-2018-4150 Proof of concept for CVE-2018-4150 by @cmwdotme...

CVE-2018-1000199

CVE-2018-1000199 The Linux ptrace code virtualizes access to the debug registers, and the virtualization code has incorrect error handling. This means that if you write an illegal value to, say, DR0, the internal state of the kernel's breakpoint tracking can become corrupt despite the fact that t...

CVE-2020-3161

CVE-2020-3161 Cisco IP Phone 11.7 - Denial of Service PoC...

Reproducing-CVE-2023-36802

Analysis of CVE-2023-36802 Welcome to my write‑up & walkthrough of CVE‑2023‑36802, a local privilege escalation vulnerability in the Microsoft Kernel Streaming Server mskssrv.sys. What was this CVE about? The bug lived in mskssrv.sys, a driver that helps Windows handle multimedia streaming e.g.,...

cve-2021-21980-nuclei-poc

This repository does not have a README...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where multiple cookie header fields can be merged without being properly counted...

CVE-2026-53360-POC

CVE-2026-53360: KVM SEV-SNP PSC heap out-of-bounds Proof of concept for a heap out-of-bounds read and write in KVM's SEV-SNP Page State Change PSC handling. A malicious SEV-SNP guest makes the host kernel walk a PSC entry array off the end of its slab allocation. That leaks the layout of...

CVE-2021-26882

CVE-2021-26882 Remote Access API Elevation of Privilege Vulnerability PoC https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26882 Step 1: Double-click crash.pbk. Step 2: Trigger a crash...

Grafiki

Grafiki Grafiki is a Django project about Sysmon and graphs, for the time being. In my opinion EventViewer, Elastic and even Kibana, are not graphic enough. The current threats are complicated and if attackers think in graphs, defenders also must do it. This is a proof of concept, the code was no...

React2Shell-CVE-2025-55182

React2Shell CVE-2025-55182 POC and lab setup Create the server from scratch npm create [email protected] react2shell-lab Accept defaults is fine, name it whatever OR Clone the repo git clone https://github.com/timsonner/React2Shell-CVE-2025-55182.git AND Install dependencies npm install THEN...

rails-rce-cve-2016-0752

Exploiting CVE-2016-0752 This app serves as a vulnerable Proof of Concept for exploiting CVE-2016-0752. For more information refer to this blog post, which explains the vulnerability, the steps required to exploit, the fix, and a link to a metasploit module. Getting Started echo ""...

node-poc-http-smuggling

This repository does not have a README...

CVE-2026-442_

CVE protobuf.js CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44294, CVE-2026-44295 - protobuf.js ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testin...

CVE-2025-59284-PoC

CVE-2025-59284-PoC Proof of concept for CVE-2025-59284 libarchive exploit usage: Usage: Poc.py e.g python poc.py test.pdf '\IP\Share\test.pdf' pdf.tar Technical writeup: https://sec-fault.com/blog/cve-2025-59284/ Video...

CVE-2026-13753-poc

CVE-2026-13753-poc Summary Certain HP DeskJet printer series is vulnerable to a Missing Authorization vulnerability, when the backend EWS server in the printer has no authorization, which allow attacker to watch all the things that admin can see and the frontend try to protect with request a GET...

CVE-2025-48384-PoC-Part2

This repository does not have a README...

cve-2006-6184

CVE-2006-6184 This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflow in Allied Telesyn TFTP Server AT-TFTP 1.9, and possibly earlier, allowing remote attackers to cause a denial of service or execute arbitrary code. Instructions Updated fo...

IoCs

IoCs Sophos-originated indicators-of-compromise from published reports /@&&@ . @ @ %@%, ./&@@&@@@@ @@ @%&@@& .@, @. @ @% @ && %@ .@@@@. &@&@//@& @/ @ @@ @ %@. ,%@@@@@@@@@&/ ., @% @@ @@,&@@ ,@ .@. @ , @& ,@@@@& .@ @ .@. @ .@ @& @@. %@@% ./. @,...

CVE-2015-6640

CVE-2015-6640 poc by Edward Hung https://source.android.com/security/bulletin/2016-01-01.html https://android.googlesource.com/kernel/common/+/69bfe2d957d903521d32324190c2754cb073be15%5E%21/F0...

CVE-2026-8451

🚨 CVE-2026-8451 - NetScaler SAML IdP Memory Overread Vulnerability A pre-authentication memory disclosure vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway configured as a SAML Identity Provider IdP. ✨ Overview CVE-2026-8451 is a High-Severity memory disclosure vulnerability caus...