40 matches found
Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019
漏洞演示说明 漏洞ISO下载链接 请通过以下链接下载以下操作系统镜像 openSUSE-Leap-15.6： https://download.opensuse.org/distribution/leap/15.6/iso/openSUSE-Leap-15.6-DVD-aarch64-Build710.3-Media.iso 镜像大小约为 4.4 GB 然后将镜像放入 Vagrantfile 所在目录并编辑该文件 ISOPATH 安装依赖项 virtualbox vagrant...
SignChecker
SignChecker 用于演示 CVE-2022-21449 漏洞的测试工具。...
Exploit for Use After Free in Google Chrome
⚠️ CVE-2026-2441-PoC - Test Chrome Vulnerability Safely !Do...
poc-test-vulnerability
poc-test-vulnerab...
Exploit for CVE-2025-36911
WhisperPair CVE-2025-36911 Vulnerability Scanner & Research...
Cross-Site-Scripting---XSS
Cross Site Scripting XSS Assignment Objective Demonstrate Cro...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell CVE-2025-55182 A proof-of-concept exploit demon...
Exploit for CVE-2025-29775
SAMLStorm CVE-2025-29775 Lab Environment !Educationalhtt...
Exploit for Improper Access Control in Papercut Papercut_Mf
CVE-2023-27350 This PoC demonstrates how it’s possible to byp...
Exploit for CVE-2025-666666
CVE-2025-666666 Successful e...
MTN Group: Social media account takeover
The social media account for https://simfy.africa was taken over, allowing the attacker to redirect visitors to their own Instagram account. This vulnerability was demonstrated through a proof of concept video...
CVE-2024-3938
The "reset password" login page accepted an HTML injection via URL parameters. This has already been rectified via patch, and as such it cannot be demonstrated via Demo site link. Those interested to see the vulnerability may spin up a...
CVE-2024-3938
The "reset password" login page accepted an HTML injection via URL parameters. This has already been rectified via patch, and as such it cannot be demonstrated via Demo site link. Those interested to see the vulnerability may spin up a...
Improper privilege management - Anyone can view room settings.
Description Hi bigbluebutton maintainers, I would like to report an improper privilege management, this allows anyone to view any room settings. Proof of Concept 1. To demonstrate the vulnerability, I've created a room https://demo.bigbluebutton.org/gl/hoa-j4s-sxx-5gn 2. Run this curl command to...
HackerOne: Second-order SOQL injection through email and campaign name parameter in Salesforce lead submission
The HackerOne directory contains profiles of bug bounty and vulnerability disclosure programs that aren't managed on HackerOne. These profiles can be claimed by the organization that manages it. As part of this flow, they will need to enter an email address to confirm that affiliation with the...
vulhub
It is an offensive tool for web application security training. The repository contains a collection of pre-built vulnerable environments based on Docker-Compose. The tool is designed to provide a simple way to create and manage vulnerable environments for web application security training. The...
Exploit for Improper Access Control in Oracle Jdk
This repository contains a collection of exploit files and proof-of-concept PoC vulnerability demonstration files from the team at Hacker House. The files are categorized into several subdirectories, each containing a specific type of exploit or vulnerability. The files include: 1. AIX-0days.txt:...
Should You Send Your Pen Test Report to the MSRC?
Every day, the Microsoft Security Response Center MSRC receives vulnerability reports from security researchers, technology/industry partners, and customers. We want those reports, because they help us make our products and services more secure. High-quality reports that include proof of concept,...
Should You Send Your Pen Test Report to the MSRC?
Every day, the Microsoft Security Response Center MSRC receives vulnerability reports from security researchers, technology/industry partners, and customers. We want those reports, because they help us make our products and services more secure. High-quality reports that include proof of concept,...