vendor-android-cves

vendor-android-cves Raccolte dei nostri POC/script di fuzzing/harness per le CVE Android dei vendor, incluse quelle presentate al BlackHat ASIA 2022: https://www.blackhat.com/asia-22/briefings/schedule/the-hidden-rce-surfaces-that-control-the-droids-26083 Aggiornamento: Ho ricevuto notizie second...

Heptagram

Heptagram Questo progetto è utilizzato per raccogliere gli EXP/POC divulgati su Internet e fornire supporto progettuale al team di sicurezza Heptagram...

CVE-2019-0708

CVE-2019-0708 Sammle PoCs und Exploits für CVE-2018-0708 aus dem Internet bisher wurde kein Exploit gefunden...

Weblogic_Vuln

Prefazione root@kitploit: L'articolo analizza in dettaglio le vulnerabilità storiche di Weblogic da CVE-2015 a CVE-2019 e raccoglie i relativi POC in WeblogicVuln. Registra gli appunti di studio sulle vulnerabilità di deserializzazione Java. Benvenuti a lasciare una star e aprire issue...

PocList

PocList Collection de POC et d'EXP de vulnérabilités que j'ai écrits moi-même. Les scripts POC, après spécification du fichier d'URL, peuvent scanner en masse les cibles en multi-threading pour les vérifier ; les scripts EXP peuvent exploiter les vulnérabilités, telles que la lecture de fichiers,...

Penetration_Testing_POC

PenetrationTestingPOC Collect and share POCs, scripts, tools, articles, and other techniques used in penetration testing, as a note. Contributions welcome. Please note that all tools may have backdoors or other anomalous behavior; it is recommended to operate in a virtual environment...

n-days

n-days Eine Sammlung von POCs & Writeups für iOS-Sicherheitslücken, die entweder von mir entdeckt, per Binärdiff aus In-the-Wild-Updates ermittelt oder einfach coole nicht-öffentliche Bugs sind. CVE| Behoben in| Link| Von mir gemeldet| ITW ausgenutzt| Beschreibung ---|---|---|---|---|---...

Bootstrap-with-XSS

Raccolta di PoC per vulnerabilità storiche di Bootstrap Questa è una pagina HTML statica per scopi di studio e ricerca, che integra molteplici proof of concept PoC di vulnerabilità cross-site scripting XSS nella storia del framework Bootstrap. Questo progetto ha lo scopo di fornire a ricercatori ...

awesome-security-vul-llm

Awesome Security Vulnerability ProjectBy LLM Introduzione del progetto Questo progetto utilizza un modello linguistico di grandi dimensioni LLM accoppiato a un crawler per cercare su GitHub tutti i progetti che contengono informazioni preziose sulle vulnerabilità, POC o regole. Riconosce...

PoC-AutoSync

🧠 PoC-AutoSync-Github Raccoglie automaticamente gli exploit Proof-of-Concept PoC pubblici da poc-in-github.motikan2010.net e mantiene il database aggiornato tramite aggiornamenti automatici. Usalo in modo responsabile — solo per scopi di ricerca e difesa. Ispirato da nomi-sec/PoC-in-GitHub. 🔍...

poc-cve-collection

poc-cve-collection Poc CVE Collection 🧪 Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. Example root@kitploit: CVE-2026-31431 Title crypto: algifaead -...

goby-poc-collection

Goby POC Collection Convert Goby vulnerability scan tools’...

PT-2026-39412

Name of the Vulnerable Software and Affected Versions Next.js versions 13.0.0 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description Applications using beforeInteractive scripts combined with untrusted content are susceptible to cross-site scripting XSS, a flaw where malicious scripts...

Exploit for Out-of-bounds Write in Linux Linux_Kernel

This is a collection of proof-of-concept PoC code for various kernel vulnerabilities. Here's a breakdown of the code and its implications: CVE-2015-0569 This PoC exploits a buffer overflow vulnerability in the prima wlan driver. The code writes a large buffer to a kernel memory location, causing ...

Exploit for Improper Access Control in Oracle Jdk

This repository contains a collection of exploit files and proof-of-concept PoC vulnerability demonstration files from the team at Hacker House. The files are categorized into several subdirectories, each containing a specific type of exploit or vulnerability. The files include: 1. AIX-0days.txt:...

ThinkPHP 5.x Remote Command Execution

Exploit Title: thinkphp 5.X RCE Date: 2019-1-14 Exploit Author: vrsystem Vendor Homepage: http://www.thinkphp.cn/ Software Link: http://www.thinkphp.cn/down.html Version: 5.x Tested on: windows 7/10 CVE : None https://github.com/SkyBlueEternal/thinkphp-RCE-POC-Collection...

ThinkPHP 5.X - Remote Command Execution

Exploit Title: thinkphp 5.X RCE Date: 2019-1-14 Exploit Author: vrsystem Vendor Homepage: http://www.thinkphp.cn/ Software Link: http://www.thinkphp.cn/down.html Version: 5.x Tested on: windows 7/10 CVE : None https://github.com/SkyBlueEternal/thinkphp-RCE-POC-Collection...