CVE-2023-29343

CVE-2023-29343 This is PoC for arbitrary file write bug in Sysmon version 14.14 After last patch Sysmon would check if Archive directory exists and if it exists it would check if archive directory is owned by NT AUTHORITY\SYSTEM and access is only granted to NT AUTHORITY\SYSTEM. If both condition...

dirtyfrag

Dirty Frag: Universal Linux LPE Abstract This document describes the Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim @v4bel, which can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write CVE-2026-43284 vulnerability and the...

CVE-2026-93495

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device...

CVE-2026-93495

A vulnerability exists in certain ASUS motherboards due to improper initialization . This flaw allows a physically proximate user to read or write arbitrary memory by inserting a specially crafted device . The vulnerability has a high severity score of 7.0 (CVSS 4.0) and requires physical access....

CVE-2023-35840

CVE-2023-35840 elFinder 2.1.62 - Path Traversal vulnerability in PHP LocalVolumeDriver connector Description Path Traversal vulnerability in PHP LocalVolumeDriver connector. This vulnerability can be exploited by allowing untrusted users to write to the local file system. Vulnerability exists in...

forensicscanner

This repository does not have a README...

CVE-2024-21762

CVE-2024-21762 out-of-bounds write in Fortinet FortiOS CVE-2024-21762 vulnerability Exploit poc by assetnote ssldohandshakeptr = b"%60%ce%42%00%00%00%00%00" getcwdptr = b"%70%62%2c%04%00%00%00%00" pivot1 = b"%52%f7%fd%00%00%00%00%00" push rdi; pop rsp; ret; pivot2 = b"%ac%c9%ab%02%00%00%00%00" ad...

smbeagle

/ \ / // / / / // / / / / / ///\ / / / / / / / / / / / / / / // / / / / , / / / // // / / / / // // / // ,// ///||////,// ///, / PRESENTS // SMBeagle SMBeagle is a cross-platform SMB fileshare auditing tool that hunts out all files it can see in the network and reports if the file can be...

CVE-2023-45878

CVE-2023-45878 CVE-2023-45878 GibbonEdu Arbitrary File Write...

cve-2021-21425

Exploit for: GravCMS 1.10.7 - Arbitrary YAML Write/Update Unauthenticated Usage: python3 exploit.py --url http://192.168.204.12/grav-admin Expected behaviour Do not use this exploit on systems you are not authorized! Happy hacking...

CVE-2023-45878_to_RCE

CVE-2023-45878 to RCE This script chains and automates Arbitrary File Write to RCE on Gibbon LMS through CVE-2023-45878 exploitation. The script performs the following steps: 1. Generates an msfvenom stageless reverse shell for Windows 2. Uploads a webshell exploiting CVE-2023-45878 3. Downloads...

exploits

exploits CVE-2021-22600: Linux kernel LPE exploit CVE-2021-3156: Linux local privilege escalation through heap overflow in sudo Demo CVE-2021-3156: One shot exploit for heap overflow vulnerability in sudo CVE-2020-6507: Out of bounds write in V8. Chrome versions = 83.0.4103.97. RCE CVE-2020-16040...

CVE-2015-6620-POC

CVE-2015-6620-POC-1 POC for one bug in CVE-2015-6620-1 ANDROIDID-24123723, AMessage unmarshal arbitrary write. The two bugs are merged to one CVE, and here is POC for one of them. Explaination 533 sp AMessage::FromParcelconst Parcel &parcel 534 int32t what = parcel.readInt32; 535 sp msg = new...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from incorrect restrictions on the path name to the catalog, allowing a intruder to write arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from incorrect restrictions on the path name to the catalog, allowing attackers to read and write arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files...

CVE-2026-40369-EXPLOIT

Full Blog - https://pwn2nimron.com/blog CVE-2026-40369: Arbitrary Kernel Address Increment via NtQuerySystemInformation Class 253 Summary Type: Arbitrary kernel write increment — PRIVILEGE ESCALATION PRIMITIVE Component: ntoskrnl.exe — ExpGetProcessInformation Trigger:...

ActiveMQ-RCE-CVE-2023-46604-Write-up

This repository does not have a README...

CVE-2025-6554

CVE-2025-6554 This repository contains This repository constructed and proved the addressof and fakeobj primitives, as well as the arbitrary address read/write primitives in V8 sandbox. Reproduce Information Commit: 609a85c2a1bd77d6f6905369f4bc4fcf34c5db09 Command Line: out\x64.release\d8...

zeroboot

Sub-millisecond VM sandboxes for AI agents via copy-on-write forking Try it curl -X POST https://api.zeroboot.dev/v1/exec \ -H 'Content-Type: application/json' \ -H 'Authorization: Bearer zbdemohn2026' \ -d '"code":"import numpy as np; printnp.random.rand3"' Benchmarks Metric| Zeroboot| E2B|...

Exploitarium-Detections

Exploitarium KQL Detection Coverage KQL detection rules for Microsoft Sentinel and Defender XDR covering the bikini/exploitarium anonymous disclosure — a personal research archive of 15+ distinct vulnerability targets across 109+ tracked files, released without vendor notification on June 23, 202...