CVE-2026-102808

PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...

CVE-2026-102809 PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...

CVE-2026-102809

PX4 Autopilot versions through 1.17.0 are vulnerable to a stack exhaustion vulnerability within the file2 test command. The root cause is a failure to validate the write chunk size parameter , allowing an attacker with shell access to provide an excessively large value to the -c option . This act...

CVE-2026-102809 PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...

CVE-2020-11108-PoC

CVE-2020-11108-PoC В этом репозитории находятся два PoC. cve-2020-11108-rce.py даст вам шелл от имени пользователя www-data. root-cve-2020-11108-rce.py даст вам шелл и повысит привилегии до root. Примечание: это деструктивно, так как мы должны перезаписать teleporter.php. Полное объяснение/отчёт...

CVE-2026-0073

🤖 CVE-2026-0073 - Обход аутентификации Wireless ADB 📌 Обзор CVE-2026-0073 — это критическая уязвимость обхода аутентификации в беспроводном ADB Android демон adbd. Злоумышленник в той же сети может обойти взаимную аутентификацию TLS и подключиться к устройству без одобрения пользователя или...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Lab This repository contains a local lab for studying CVE-2026-34197 in Apache ActiveMQ Classic and for comparing a vulnerable instance against a patched build. The repository is organized to support two goals: Reproduce the issue in a tightly controlled, isolated...

CVE-2025-55182-POC

CVE-2025-55182-POC React2Shell POC Usage: sudo python3 hehe.py -t -c Example: ❯ sudo python3 hehe-t 12.05.12.05 -c "id" . .. . | \ | | / \ / || || | | | / || | | | | || | | | | | | | | / ^ \ | ,----'---| |----| | | | | ----| || | | | | | | | | / | | / /\ \ | | | | | | | | \ \ | | | | | | | | | |...

test-task-CVE-2024-25600

test-task-CVE-2024-25600 Repository for internship test-task. Step 0: Clone this git repo git clone https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600 Step 1: Create docker containers Start Docker daemon sudo systemctl start docker.service Start Docker Containers To start the docker...

CVE-2019-11580

CVE-2019-11580 Un shell CVE-2019-11580 pour exploiter une vulnérabilité à distance...

bitlocker-hardening

🔐 yellowkey-mitigation BitLocker TPM+PIN Hardening Against CVE-2026-45585 YellowKey Automated mitigation for the WinRE BitLocker bypass — no full patch available yet 🔍 The Vulnerability YellowKey is a publicly disclosed BitLocker bypass that gives an attacker with physical access an unrestricted...

ZeroLogon-to-Shell

This is a combination of the zerologontester.py code and the tool evil-winrm to get a shell. I just added a "os.system" to use evil-winrm. Requirements: To get the Administrator NTLM HASH I recommend you to use secretsdump tool from impacket And, of course, you need to install evil-winrm This is...

Exploit-CVE-2011-2523

README : Exploit for VSFTP 2.3.4 This Python script is designed to exploit a backdoor vulnerability present in VSFTP version 2.3.4. The exploit grants unauthorized access to the system running this particular version of VSFTP. Usage To use this exploit script, follow these steps: Clone Repository...

CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2019-16278-Nostromo-1.9.6-RCE Ceci est un exploit de CVE-2019-16278 pour Nostromo 1.9.6 RCE. Cet exploit permet une exécution de code à distance RCE sur la machine victime. Prérequis optparse socat sys Utilisation Vous pouvez utiliser l'exploit comme suit : python3 CVE-2019-16278.py...

CVE-2022-1609

CVE-2022-1609 Bash poc for CVE-2022-1609 WordPress Weblizar Backdoor How to install ? wget https://raw.githubusercontent.com/NullBrunk/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh How to use it ? NullBrunk$ ./exploit.sh http://127.0.0.1:8080 + Targeting http://127.0.0.1:8080 $ i...

CVE-2025-55182

CVE-2025-55182 Ce dépôt contient la documentation liée à la vulnérabilité CVE-2025-55182 React2Shell. La documentation est disponible : sous forme de site web : https://memergamer.github.io/CVE-2025-55182/ en PDF main.pdf : https://github.com/MemerGamer/CVE-2025-55182/releases...

TP-L-NK-SIZMA-EXPLO-T

TP-LiNK-SIZMA-EXPLOiT TP-Link Router Authenticated RCE Exploit CVE-2022-30074 This tool performs authenticated remote code execution using the CVE-2022-30075 vulnerability found in TP-Link Archer AX50 and some other TP-Link router models. TP-Link Router Authenticated RCE Exploit CVE-2022-30075 Th...

CVE-2019-2729_creal

CVE-2019-2729 - creal PoC для эксплуатации CVE-2019-2729 на WebLogic Использование эксплойта python3 creal.py -h usage: creal.py -h -u URL -f F -c CMD -s SH optional arguments: -h, --help show this help message and exit -u URL, --url URL target url -f F, --file F url file -c CMD, --command CMD...

vsftpd2.3.4PyExploit

vsftpd2.3.4PyExploit Un exploit pour obtenir root sur vsftpd 2.3.4 CVE-2011-2523 écrit en python Utilisation : ./exploit.py $VictimIPaddress Attention ! L'exploit ouvre un shell qui n'est pas reverse. Je recommande d'ouvrir un reverse shell après l'exploit. Je ne l'ai pas fait ici car je ne voula...

EXPLOIT-CVE-2026-63030

Laboratoire — CVE-2026-63030 “wp2shell” + CVE-2026-60137 Environnement Docker intentionnellement vulnérable avec WordPress Core 7.0.1 et un exploit en Python qui démontre la chaîne pré-authentification wp2shell : CVE| Composant| Description ---|---|--- CVE-2026-63030| API REST /wp-json/batch/v1|...