WinDriver-EXP

취약한 Windows 드라이버용 PoC 저장소 이 저장소에는 Windows 드라이버의 취약점에 대한 PoC 익스플로잇이 포함되어 있으며, 권한 상승, 임의 코드 실행 또는 기타 보안 위험을 초래할 수 있는 결함을 보여줍니다. 연구 및 교육 목적으로만 제공됩니다. PoC 목록 취약점| CVE ID| 구성 요소 ---|---|--- Windows 커널 권한 상승 취약점| CVE-2024-21338| appid.sys Windows 커널 스트리밍 권한 상승 취약점| CVE-2024-30084| ks.sys Microsoft 스트리밍...

Vulnerability_PoC

흥미로운 취약점들의 PoC/Exploit 작성자: Numen Cyber Labs 취약점 연구팀 1. TCP/IP RCE 취약점 CVE-2022–34718 PoC 복원 및 분석 https://medium.com/@numencyberlabs/analysis-and-summary-of-tcp-ip-protocol-remote-code-execution-vulnerability-cve-2022-34718-8fcc28538acf 2. CVE-2022–36537 취약점 기술 분석 및 Exploit...

My-PoC-Exploits

My-PoC-Exploits PoC exploits I wrote. They're as is and I will not offer support...

CISA-KEV

CISA-KEV Executive Summary This repository provides automated tracking and analysis of both CISA's KEV and VulnCheck KEV catalogs, cross-referenced with Nuclei security templates and public proof-of-concept exploits. By integrating VulnCheck KEV, coverage expands from 1,557 to 4,720 total unique...

CVE-2017-5638

CVE-2017-5638 CVE-2017-5638 PoC 익스플로잇...

CVEs

Rhino CVE Proof-of-Concept Exploits A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs. CVE-2026-46546: Frappe LMS Header Tag Injection Leading to Open Redirect CVE-2026-39405: Frappe LMS Path Traversal in SCORM Package Upload Leading to...

same_type_object_reuse_exploits

PoC 동일 유형/동일 주소 객체 재사용 익스플로잇 Mathias Krause가 개발한 PoC 익스플로잇으로, https://grsecurity.net/exploitinganddefendingagainstsametypeobjectreuse 블로그와 관련이 있습니다...

research

보안 연구 이 저장소는 제가 발견한 보안 취약점CVE 연구를 위한 전용 저장소입니다. 이 저장소에는 발견된 취약점에 대한 상세한 기술 문서, 개념 증명PoC 익스플로잇, 그리고 분석 결과가 포함되어 있습니다. 소개 이 저장소는 제가 발견하고 연구한 모든 CVE를 모아 둔 곳으로, 다음을 포함합니다: 각 취약점에 대한 상세한 기술 분석 교육 목적의 개념 증명PoC 코드 공격 시나리오 및 영향 평가 수정 상태 및 패치 정보 공식 CVE 기록 참조 발견된 CVE CVE-2026-26158 - BusyBox 하드링크 우회 9.3 치명...

By-Poloss..-..CVE-2026-9067

POC & Xploit - 개념 증명 디렉토리 WordPress 보안 테스트 환경에서 발견된 취약점에 대한 문서 및 익스플로잇 취약점 목록 CVE ID| 플러그인| 심각도| 유형| 상태 ---|---|---|---|--- CVE-2026-9067| Schema & Structured Data for WP & AMP| 높음 8.1| 무제한 파일 업로드| 문서화됨 CVE-2026-9067 빠른 요약 필드| 값 ---|--- CVE ID| CVE-2026-9067 플러그인| Schema & Structured Data for WP ...

CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities KEV catalog by the U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-38094 CVSS score: 7.2,...

PoC Exploits Do More Good Than Harm: Threatpost Poll

When it comes to the release of proof-of-concept PoC exploits, more security experts agree that the positives outweigh the negatives, according to a recent and informal Threatpost poll. Last week, Threatpost conducted a reader poll and almost 60 percent of 230 security pundits thought it was a...

Threatpost Poll: Are Published PoC Exploits a Good or Bad Idea?

The practice of disclosing proof-of-concept PoC exploits has long caused a debate in the security community. As the name suggests, these outline steps used to exploit a vulnerability in a system to show how it can be done — and are used to test networks and pinpoint vulnerable aspects of a system...

News Wrap: PoC Exploits, Cable Haunt and Joker Malware

This week’s news wrap podcast breaks down the biggest Threatpost security stories of the week, including: Various proof-of-concept exploits being released for serious vulnerabilities this week – including for the recently-patched crypto-spoofing vulnerability found by the National Security Agency...

PoC Exploits Published For Microsoft Crypto Bug

Two proof-of-concept PoC exploits have been publicly released for the recently-patched crypto-spoofing vulnerability found by the National Security Agency and reported to Microsoft. The vulnerability CVE-2020-0601 could enable an attacker to spoof a code-signing certificate necessary for validati...

ShareCMS 0.1 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

QNX Multiple Vulnerabilities

OVERVIEW Independent researcher Luigi Auriemma identified a stack-based buffer overflow and a buffer copy without checking size of input vulnerabilities in QNX’s Phrelay, Phwindows, and Phditto products without coordination with ICS-CERT, the vendor, or any other coordinating entity known to...

WSN Links SQL Injection

'WSN Links' SQL Injection Vulnerability CVE-2010-4006 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injection of various parameters. By assembling portions of SQL code between the...

ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------...

sharecms-sql.txt

============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...