484 matches found
CVE-2008-4654
CVE-2008-4654 PoC exploit for vulnerability CVE-2008-4654 VLC Media Player Stack-Based Buffer Overflow via TiVo Ty file extension. Usage Run the script having a sample .ty+ file inside the same folder as the script. The ty+ file will be modified to execute the payload when opened with VLC Media...
CVE-2025-3102-exploit
This repository does not have a README...
CVE-2022-0847-Exploit-Implementation
CVE-2022-0847-Exploit-Implementation This is a POC showing how to pop a reverse bash shell for arbitrary code execution on a foreign machine using CVE-2022-0847, "Dirty Pipe Exploit". This vulnerability only affects Linux kernel versions 5.8 or newer but was patched in versions 5.16.11, 5.15.25,...
CVE-Exploit
Twitter: @0xAbbarhSF 1、CVE-2020-2551 CVE-2020-2551 poc exploit python example keys: GIOP corba How use python3 CVE-2020-2551.py -u http://192.168.26.79:7001 cat urls.txt|sort -u|xargs -I % python3 CVE-2020-2551.py -u % cat xxx.html|grep -Eo 'https?://^ /+'|sort -u|xargs -I % python3...
auth-bypass-CVE-2025-40554
CVE-2025-40554 – SolarWinds Web Help Desk Auth Bypass PoC shodan Query http.favicon.hash:"1895809524" Nuclei nuclei -u https://TARGET:8443 -t CVE-2025-40554.yaml nuclei -l listtarget.txt -t CVE-2025-40554.yaml pip install -r requirements.txt Usage Single target bypass + login, default...
CVE-2021-1732
CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 Local Privilege Elevation Vulnerability Research and Poc/Exploit Development Affected Systems and Application Versions Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 20H2 for...
CVE-2024-23346
CVE-2024-23346 This PoC is based on the report/findings of William Khem-Marquez and Matthew Horton: https://github.com/materialsproject/pymatgen/security/advisories/GHSA-vgv8-5cpj-qj2f Usage: python3 CVE-2024-23346.py -t targetURL -u username -p password -l localhost -P localport -X -P and -X are...
cve-2018-12386
Firefox Sandboxed RCE Exploit CVE-2918-12386 Here is a simple exploit for the vulnerability CVE-2018-12386 found by Niklas Baumstark, Samuel Groß and Bruno Keith. This is mostly a Poc I did for fun, there is no sandbox bypass and it will only work on a given Linux setup where the offsets used by...
CVE-2023-31320
CVE-2023-31320 Proof of concept code for a denial of service vulnerability in the AMD display driver that corrupts the display. AMD security bulletin Demo This video contains flashing lights! https://github.com/whypet/CVE-2023-31320/assets/47226783/658776cb-6dbc-4a76-a671-fc1f4924b2a9 Building...
LPE---CVE-2020-0796
Usage: Make sure Python is installed, then run poc.py. Windows Kernel Write-What-Where CVE-2020-0796 Exploit Intended only for educational and testing in corporate environments. MasterSpl0it takes no responsibility for the code, use at your own risk. Rewritten CVE-2020-0796 Local Privilege...
CVE-2023-23397-POC-Using-Interop-Outlook
CVE-2023-23397-POC-Using-Interop-Outlook Easy implementation for CVE-2023-23397 exploit POC using Microsoft.Office.Interop.Outlook...
cve-2020-5902
cve-2020-5902 cve-2020-5902 POC exploit POC CVE-2020-5902 - r0ttenbeef Usage: cve-2020-5902.py options Options: -h, --help show this help message and exit -u URL, --url=URL specify target url EX:http://100.200.300.10/ -i, --info grap some informations -f FILENAME, --file=FILENAME specify the loca...
CVE-2020-15999
CVE-2020-15999 Here you will all the resources in order to execute the PoC for the CVE-2020-15999 in Google Chrome and Ftview Ubuntu. There are two folders in this repository, one for each program. Google Chrome In order to reproduce the exploit you will have to install a Google Chrome version...
CVE-2024-27198
EN GenTeamCityExploit is a PoC tool that targets a vulnerability in the TeamCity server CVE-2024-27198. It enables the discovery of a TeamCity version and the creation of a new admin user by exploiting an authentication bypass flaw. Features Extracts the version of the TeamCity server. Checks for...
CVE-2024-53677
CVE-2024-53677 Proof of concept exploit for CVE-2024-53677 - Apache Struts file upload path traversal vulnerability leading to Remote Code Execution...
AOSP-ExploitUserDictionary
AOSP-ExploitUserDictionary PoC Exploit for AOSP UserDictionary Content Provider CVE-2018-9375 Security Advisory https://ioactive.com/wp-content/uploads/2018/08/IOActive-Security-Advisory-AOSP-UserDictionaryProvider-v1.0.pdf More Information...
CVE-2022-24434_POC
CVE-2022-24434 – PoC for Dicer This repository contains a Proof-of-Concept PoC for CVE-2022-24434 , a vulnerability affecting the Dicer npm package. PoC target version: 0.3.1 ensure the dicer code used is exactly v0.3.1 📂 Project Structure Make sure the directory is structured like this: . ├──...
CVE-2011-2523
CVE-2011-2523 usage: CVE-2011-2523.py -h -v RHOST RPORT vsFTPd 2.3.4 CVE-2011-2523 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2011-2523 positional arguments: RHOST target address RPORT target port optional arguments: -h, --help show this help message and exit -v, --version show program'...
CVE-2020-16898
This is an educational exercise. Use at your own risk. CVE-2020-16898 Exploit Windows Binary PoC ./CVE-2020-16898.exe -t -u will run the exploit. ./CVE-2020-16898.exe -t 10.10.10.1 -u Administrator See my other exploits here This is a lesson as to why you should not trust binaries on the internet...
POC_CVE-2025-53558
CVE-2025-53558 Disclaimer This program should only be used for authorized security testing and research purposes. Users must comply with the Cybersecurity Law and use it appropriately. The author is not responsible for any illegal attacks or other unlawful acts that occur when users use this tool...