By-Poloss..-..CVE-2026-9067

POC & Xploit - 概念验证目录 针对WordPress安全测试环境中发现的漏洞的文档和利用工具。 漏洞列表 CVE ID| 插件| 严重性| 类型| 状态 ---|---|---|---|--- CVE-2026-9067| Schema & Structured Data for WP & AMP| 高 8.1| 任意文件上传| 已记录 CVE-2026-9067 快速摘要 漏洞描述 插件 Schema & Structured Data for WP & AMP 在 1.60 版本之前，未验证 AJAX...

Vulnerability_PoC

一些有趣漏洞的 PoC/Exploit 作者：Numen Cyber Labs 漏洞研究团队 1. TCP/IP RCE 漏洞（CVE-2022–34718）PoC 还原与分析 https://medium.com/@numencyberlabs/analysis-and-summary-of-tcp-ip-protocol-remote-code-execution-vulnerability-cve-2022-34718-8fcc28538acf 2. CVE-2022–36537 漏洞技术分析与 Exploit...

CVE-2017-5638

CVE-2017-5638 CVE-2017-5638 PoC Exploits...

CISA-KEV

CISA-KEV 执行摘要 本仓库提供对 CISA 的 KEV 与 VulnCheck KEV 目录的自动化跟踪与分析，并与 Nuclei 安全模板和公开的概念验证（PoC）漏洞利用代码进行交叉引用。通过集成 VulnCheck KEV，覆盖范围从 1,557 扩展到 4,720 个唯一 CVE - 增加 3 倍 。合并后的数据集显示，所有 KEV 漏洞中有 36.1% 可通过 Nuclei 模板主动扫描（1,702 个 CVE）。VulnCheck 的扩展覆盖额外增加了 3,163 个漏洞 ，这些漏洞不在 CISA...

WinDriver-EXP

存在漏洞的 Windows 驱动程序 PoC 仓库 此仓库包含针对 Windows 驱动程序漏洞的 PoC 漏洞利用代码，展示了可能导致特权提升、任意代码执行或其他安全风险的缺陷。仅供研究和教育使用。 PoC 列表 漏洞| CVE ID| 组件 ---|---|--- Windows 内核特权提升漏洞| CVE-2024-21338| appid.sys Windows 内核流式处理特权提升漏洞| CVE-2024-30084| ks.sys Microsoft 流式处理服务特权提升漏洞| CVE-2024-30090| ks.sys & ksthunk.sys Windows...

My-PoC-Exploits

My-PoC-Exploits 私が作成したPoCエクスプロイトです。現状のまま提供しており、サポートは行いません。...

CVEs

Rhino CVE 概念验证漏洞利用程序 这是 Rhino Security Labs 团队为多个 CVE 编写的概念验证漏洞利用脚本合集。 CVE-2025-32815: Infoblox NetMRI 硬编码凭据身份验证绕过 CVE-2025-32814: Infoblox NetMRI 通过 skipjackUsername 的未认证 SQL 注入 CVE-2025-32813: Infoblox NetMRI getsamlrequest 未认证命令注入 CVE-2024-55965: 通过失效的访问控制允许“App Viewer”访问“Restart” API 请求，造成拒绝服...

research

Investigación de Seguridad Repositorio dedicado a mis descubrimientos de vulnerabilidades de seguridad CVEs. Este repositorio contiene documentación técnica detallada, exploits de prueba de concepto y análisis de las vulnerabilidades descubiertas. Acerca de Este repositorio agrupa todos los CVEs...

same_type_object_reuse_exploits

PoC 同类型/同地址对象重用利用 由 Mathias Krause 开发的 PoC 漏洞利用，与 https://grsecurity.net/exploitinganddefendingagainstsametypeobjectreuse 上的博客文章相关。...

CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities KEV catalog by the U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-38094 CVSS score: 7.2,...

PoC Exploits Do More Good Than Harm: Threatpost Poll

When it comes to the release of proof-of-concept PoC exploits, more security experts agree that the positives outweigh the negatives, according to a recent and informal Threatpost poll. Last week, Threatpost conducted a reader poll and almost 60 percent of 230 security pundits thought it was a...

Threatpost Poll: Are Published PoC Exploits a Good or Bad Idea?

The practice of disclosing proof-of-concept PoC exploits has long caused a debate in the security community. As the name suggests, these outline steps used to exploit a vulnerability in a system to show how it can be done — and are used to test networks and pinpoint vulnerable aspects of a system...

News Wrap: PoC Exploits, Cable Haunt and Joker Malware

This week’s news wrap podcast breaks down the biggest Threatpost security stories of the week, including: Various proof-of-concept exploits being released for serious vulnerabilities this week – including for the recently-patched crypto-spoofing vulnerability found by the National Security Agency...

PoC Exploits Published For Microsoft Crypto Bug

Two proof-of-concept PoC exploits have been publicly released for the recently-patched crypto-spoofing vulnerability found by the National Security Agency and reported to Microsoft. The vulnerability CVE-2020-0601 could enable an attacker to spoof a code-signing certificate necessary for validati...

ShareCMS 0.1 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

QNX Multiple Vulnerabilities

OVERVIEW Independent researcher Luigi Auriemma identified a stack-based buffer overflow and a buffer copy without checking size of input vulnerabilities in QNX’s Phrelay, Phwindows, and Phditto products without coordination with ICS-CERT, the vendor, or any other coordinating entity known to...

WSN Links SQL Injection

'WSN Links' SQL Injection Vulnerability CVE-2010-4006 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injection of various parameters. By assembling portions of SQL code between the...

ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------...

sharecms-sql.txt

============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...