CVE-2019-14040

CVE-2019-14040 Proof-of-concept code for CVE-2019-14040 More details about the vulnerability are available in the blog post. If you have any questions, you are welcome to DM me on Twitter @tamirzb. Build & Run In order to build, run Android NDK's ndk-build. In order to run the PoC, run the binary...

CVE-2023-37250-POC

CVE-2023-37250 PoC Write up: https://hackingiscool.pl/roaming-and-racing-to-get-system-cve-2023-37250/...

dlink_shell_poc

dlinkshellpoc Dlink shell PoC Tested on D-Link 815 Version A 1.3 Works with: DIR-110 DIR-412 DIR-600 DIR-610 DIR-615 DIR-645 https://vuldb.com/?id.7843 DIR-815 Note: PoC Code doe not handle captas. Example root@kali: ./dlinkshellpoc.py -h usage: dlinkshellpoc.py -h -p PASSWORD -u URL -x D-Link...

CVE-2023-48022

CVE-2023-48022 CVE-2023-48022 exploit modified from Bishop Fox work How to use set ip and port in jobs.py set payload in malicious.py $ pip install ray $ python3 jobs.py...

CVE-2017-1000117

CVE-2017-1000117 - PoCs git clone --recurse-submodules "https://github.com/Manouchehri/CVE-2017-1000117.git" cat /tmp/pwned.txt Go go get "github.com/Manouchehri/CVE-2017-1000117" cat /tmp/pwned.txt...

AOSP-ExploitUserDictionary

AOSP-ExploitUserDictionary PoC Exploit for AOSP UserDictionary Content Provider CVE-2018-9375 Security Advisory https://ioactive.com/wp-content/uploads/2018/08/IOActive-Security-Advisory-AOSP-UserDictionaryProvider-v1.0.pdf More Information...

auth-bypass-CVE-2025-40554

CVE-2025-40554 – SolarWinds Web Help Desk Auth Bypass PoC shodan Query http.favicon.hash:"1895809524" Nuclei nuclei -u https://TARGET:8443 -t CVE-2025-40554.yaml nuclei -l listtarget.txt -t CVE-2025-40554.yaml pip install -r requirements.txt Usage Single target bypass + login, default...

CVE-2024-30043-XXE

CVE-2024-30043-XXE Credit The impact of the vulnerability is limited at present, but thanks to https://x.com/chudyPB for providing a clever bypass idea. https://x.com/chudyPB...

CVE-Exploit

Twitter: @0xAbbarhSF 1、CVE-2020-2551 CVE-2020-2551 poc exploit python example keys: GIOP corba How use python3 CVE-2020-2551.py -u http://192.168.26.79:7001 cat urls.txt|sort -u|xargs -I % python3 CVE-2020-2551.py -u % cat xxx.html|grep -Eo 'https?://^ /+'|sort -u|xargs -I % python3...

CVE-2015-7755-POC

CVE-2015-7755-POC CVE-2015-7755 vulnerability detection using ssh to connect those vulnerable version: ScreenOS 6.2.0r15—6.2.0r18，6.3.0r12—6.3.0r20 Juniper Networks user: root passwd: %sun='%s' = %u...

CVE-2024-5522

EN A PoC exploit scanner for CVE-2024-5522 vulnerability in WordPress websites. This tool helps identify and exploit the vulnerability by scanning a list of target URLs and attempting a specific payload to determine if the site is vulnerable. Features Automatic Vulnerability Scanning : Scans targ...

CVE-2022-0847-Exploit-Implementation

CVE-2022-0847-Exploit-Implementation This is a POC showing how to pop a reverse bash shell for arbitrary code execution on a foreign machine using CVE-2022-0847, "Dirty Pipe Exploit". This vulnerability only affects Linux kernel versions 5.8 or newer but was patched in versions 5.16.11, 5.15.25,...

F5_RCE

Usage python3 f5rce.py -u Specify target URL -f Batch detect from file -c Execute command The effect is as follows: PS: The output is not aesthetically pleasing enough, I will modify it 😁 Issues This PoC currently only supports some commands. Executing history, ls, etc. fails for unknown reasons...

CVE-2022-21907

CVE-2022-21907 A REAL DoS exploit for CVE-2022-21907 It supports IPv4/IPv6/HTTP/HTTPS Affect - Windows - 10 Version 1809 for 32-bit Systems - 10 Version 1809 for x64-based Systems - 10 Version 1809 for ARM64-based Systems - 10 Version 21H1 for 32-bit Systems - 10 Version 21H1 for x64-based System...

CVE-2024-7593_PoC_Exploit

CVE-2024-7593 Exploit Script This Bash script serves as a proof of concept PoC for exploiting the authentication bypass vulnerability in Ivanti vTM CVE-2024-7593. It allows users to create a new admin user on the target system. Table of Contents Prerequisites Usage Parameters Example Author Licen...

log4j-shell-poc

log4shell-poc CVE-2021-44228 Proof-of-concept exploit for the Log4j vulnerability CVE-2021-44228, also known as Log4Shell. This tool generates a malicious Java class, starts an LDAP referral server, and serves the payload over HTTP, allowing a remote attacker to execute arbitrary commands on a...

CVE-2013-3651

CVE-2013-3651 PoC - EC-CUBE 2 Usage Requirements Python 3 Execution $ python poccve20133651.py - e.g. $ python poccve20133651.py http://127.0.0.1:9000/ Result: Vulnerable! PoC Vulnerability | EC-CUBE, an open platform for building and renewing e-commerce sites...

CVE-2020-17382

CVE-2020-17382 PoC exploits for CVE-2020-17382 Working exploits for: Windows 10 - 1709 Windows 7 x64 SP1 Reference blog post: https://www.matteomalvica.com/blog/2020/09/24/weaponizing-cve-2020-17382/...

PyPATHPwner

POC Exploit for CVE-2022-26488 - Python for Windows CPython escalation of privilege vulnerability, discovered by the Lockheed Martin Red Team...

CVE-2021-28476-tools-env

pack test and exploitdev for POC CVE-2021-28476 from bluefrostsecurity researcher installation guide: cd tools/ ./addtopathtools.sh addition tools for /usr/bin/ remove tools from /usr/bin: cd tools/ ./deltopathtools.sh tools: pocinit: description: preinit env guest host for compile POC see...