CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T...

CVE-2024-55591-POC

ScaryByte R&D PoC for CVE-2024-55591 A comprehensive all-in-one Python-based Proof of Concept script to discover and exploit a critical authentication bypass vulnerability CVE-2024-55591 in certain Fortinet devices. This script: 1. Installs Missing Dependencies automatically 2. Optionally Scans a...

CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV

Executive summary macOS Music and TV do an insecure rename resulting in FDA by gaining full control over the user's TCC.db I reported this bug in separate tickets for each app, feel free to merge if applicable. The underlying problem is that these apps have FDA but fail to sanitize their file...

CVE-2021-26828_ScadaBR_RCE

POC CVE-2021-26828ScadaBRRemoteCodeExecution ScadaBR 0.9.1 on Linux and through 1.0 and 1.12.4CE on Windows allows remote authenticated users to upload and execute arbitrary JSP files via 'viewedit.shtm' and Remote Code Execution. Exploit Usage Commands: Windows: $ sudo python WinScadaRCE.py Linu...

HikPwn

HikPwn HikPwn, a simple scanner for Hikvision devices with basic vulnerability scanning capabilities written in Python 3.8. This project was born out of curiosity while I was capturing and watching network traffic generated by some Hikvision's software and devices. Setup instructions: git clone...

Backdooring-ZMM100-FingerPrint-Devices

Hacking Embedded Devices : Hardware platform ZMM100 : The fingerprint access control device Made by ZKSoftware. Default User/Password : root:solokey Protocol : Telnet 23. Scripts : pwnit.py : Automated tool for hacking devices. hell : second backdoor. leak-data.sh : third backdoor. YouTube Video ...

CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit

CVE-2026-20245 - Cisco SD-WAN Privilege Escalation Exploit ⚠️ WARNING This code is ONLY for educational purposes and authorized security testing. 📋 Description CVE-2026-20245 is a privilege escalation vulnerability in the CLI of Cisco Catalyst SD-WAN Controller vSmart, Cisco Catalyst SD-WAN Manage...

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 is a vulnerability I submitted to NVIDIA PSIRT. Personally, it may lead to high security risks in multi-tenant HPC clusters, especially in cloud machine-learning platforms. This repository simply demonstrates the vulnerability on GPU containers created by...

AhMyth-Android-RAT

AhMyth Android Rat Beta Version It consists of two parts : Server side : desktop application based on electron framework control panel Client side : android application backdoor Getting Started You have two options to install it 1 From source code Prerequisite : Electron to start the app Java to...

CVE-2024-21546

UniSharp Laravel Filemanager Unauthenticated RCE CVE-2024-21546 This repository contains security assessment tooling, detection templates, and an automated exploit toolkit for identifying and exploiting Unauthenticated Remote Code Execution RCE in applications utilizing the...

CVE-2025-27840-WIP

CVE-2025-27840-WIP A Work-In-Progress for CVE-2025-27840 CVE-2025-27840 Overview CVE-2025-27840 is a medium-severity vulnerability CVSS 6.8 affecting Espressif ESP32 Bluetooth chips , which are integrated into over 1 billion IoT devices globally. The flaw involves 29 undocumented Host Controller...

CVE-2026-78071

Stored XSS via Location Title in DPCalendar Free DPCalendar Free ≤ 10.11.2 — Author-Role User Bypasses Content Review to Inject Persistent XSS via Location Title, Triggered on Hover by Any Visitor -orange SUMMARY The $location-title field is rendered without htmlspecialchars in...

CcmMessagingBackdoor

CcmMessagingBackdoor Proof of Concept tooling to build and install a rogue CcmMessaging service to maintain access on a Management Point Usage Compile and install the rogue COM service on the Management Point Compile PS C:\ C:\Windows\Microsoft.NET\Framework64\v2.0.50727\csc.exe /t:library...

CVE-2023-3460

CVE-2023-3460 Exploit for CVE-2023-3460 - Unauthorized admin access for Ultimate Member plugin. PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

vRealizeLogInsightRCE

VMSA-2023-0001 POC for VMSA-2023-0001 affecting VMware vRealize Log Insight which includes the following CVEs: VMware vRealize Log Insight Directory Traversal Vulnerability CVE-2022-31706 VMware vRealize Log Insight broken access control Vulnerability CVE-2022-31704 VMware vRealize Log Insight...

CVE-2026-33910_SqlInjectionVulnerabilityOpenEMR8.0.0.2

CVE-2026-33910 - SQL Injection Vulnerability in OpenEMR Weakness CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize ...

EternalBlue-Exploit-Demonstration-MS17-010

EternalBlue Exploit Demonstration MS17-010 Cybersecurity lab demonstrating exploitation of CVE-2017-0144 EternalBlue using Metasploit against a vulnerable Windows 7 system, achieving SYSTEM-level access via Meterpreter. This project also simulates a WannaCry-style ransomware attack SAFE DEMO and...

CVE-2017-1000112-PoC

CVE-2017-1000112Buffer overflow download iso image from https://old-releases.ubuntu.com/releases/16.10/ubuntu-16.10-server-amd64.iso gcc exploit.c -o exploit got root...

CVE-2025-69821-Beat-XP-Vega-Smartwatch-Security-Assessment

CVE-2025-69821 : Beat-XP-Vega-Smartwatch-Security-Assessment A security assessment of the Beat XP VEGA Smartwatch Firmware RB303ATV006229 focused on Bluetooth Low Energy BLE connectivity revealed a design and implementation weakness that enables a nearby BLE central device to establish and retain...

CVE-2025-58434-Unauthenticated-Password-Reset-Flowwise

Flowise Password Reset Account Takeover ATO For research and testing purposes only! I am not responsible for any damages to live infrastructure if this tool is not used as intended. Only use on systems you own or have permission to be testing! Usage usage: CVE-2025-58434-PasswordResetNew.py -h -u...