cve-2025-4615

CVE-2025-4615 — Technical Analysis & Proof of Concept Vulnerability: Improper Neutralization of Input in PAN-OS Management Web Interface Vendor Advisory: https://security.paloaltonetworks.com/CVE-2025-4615 CVSS 4.0: 6.9 MEDIUM — Integrity HIGH, Availability HIGH CWE: CWE-83 Improper Neutralizatio...

SysTracingPoc

SysTracingPoc CVE-2020-0668 - Microsoft Windows Service Tracing Arbitrary File Move Local Privilege Escalation Vulnerability For more information: https://itm4n.github.io/cve-2020-0668-windows-service-tracing-eop/...

CVE-2023-0156

CVE ID : CVE-2023-0156 Vulnerability Type : Directory Traversal Description : The All-In-One Security AIOS plugin for WordPress is vulnerable to directory traversal in versions up to, and including, 5.1.4. This allows authenticated attackers with administrator-level permissions to read the conten...

CVE-2024-23897

CVE-2024-23897 Jenkins Arbitrary File Leak Vulnerability CVE-2024-23897 !CAUTION ⚠️ Disclaimer: IMPORTANT: This script is provided for educational, ethical testing, and lawful use ONLY. Do not use it on any system or network without explicit permission. Unauthorized access to computer systems and...

CVE-2021-41773

CVE-2021-41773 Poc CVE-2021-41773 - Apache 2.4.49 with CGI enabled Usage : chmod -x CVE-2021-41773.sh ./CVE-2021-41773.sh http://ip:port/ /etc/passwd References https://nvd.nist.gov/vuln/detail/CVE-2021-41773 https://vulners.com/cve/CVE-2021-41773...

CVE-2025-66034

CVE-2025-66034 — fontTools varLib Arbitrary File Write Vulnerability fontTools is a Python library for manipulating font files. Its varLib module processes .designspace files — an XML format that describes how multiple font masters should be interpolated to produce a variable font. Two weaknesses...

CVE-2022-4047

CVE-2022-4047 Return Refund and Exchange For WooCommerce 4.0.9 - Unauthenticated Arbitrary File Upload Usage @@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@ @@@@@@@@ @@@@@@ @@@@@@ @@@ @@@@@@@@ @@@ @@@@@@@@ @@@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@@@ @@@@@@@@@@ @@@@@@@@ @@@@@@@@ @@@@ @@@@@@@@@@ @@@@ @@@@@@@@ !@@ @@! @@@ @...

CVE-2025-11001---7-Zip

CVE-2025-11001 - 7-Zip High-severity symlink traversal in 7-Zip allowing arbitrary file write / RCE Patched in 7-Zip 25.00 July 2025 – Public exploit available FOR AUTHORIZED SECURITY TESTING AND RESEARCH ONLY -critical Vulnerability Summary CVE : CVE-2025-11001 CVSS v3.1 : 7.0 High –...

CVE-2023-43879-RiteCMS-Stored-XSS---GlobalContent

Rite CMS v3.0 Multiple Stored XSS Author: Sergio Description: Rite CMS 3.0 is affected by a Cross-Site scripting XSS stored vulnerability that allows attackers to execute arbitrary code via a crafted payload in to the Global Content Blocks in the Administration Menu. Attack Vectors:...

CVE-2025-66034

CVE-2025-66034 — fontTools varLib Arbitrary File Write → RCE PoC exploit for an Arbitrary File Write + XML Injection vulnerability infontTools.varLib Tested on HackTheBox — VarIaType Vulnerability fontTools.varLib processes .designspace XML files to build variable fonts. Two weaknesses combine to...

cve-2019-16278

CVE-2019-16278 This is an exploit for the CVE-2019-16278 vulnerability. It allows remote code execution on an nhttpd server v1.9.6. Building from Source This tool is written in Rust and you need to install the Rust compiler which is super easy if you follow the instructions in their page Compilin...

printDemon2system

printDemon2system CVE-2020-1048 PrintDemon privilege escalation to SYSTEM PrintDemon was a logic vulnerability in the Windows Print Spooler service spoolsv.exe. The vulnerability was in the way the spooler handled print jobs to files, and when exploited allowed arbitrary writing to the file syste...

spawn

SPAWN - BOF de Cobalt Strike BOF de Cobalt Strike que crea un proceso sacrificial, lo inyecta con shellcode y ejecuta el payload. Construido para evadir hooks de EDR/UserLand al crear un proceso sacrificial con Arbitrary Code Guard ACG, BlockDll y suplantación de PPID. Debido a ACG, esto no es...

CVE-2026-92229

CVE-2026-92229 — Forminator Unauthenticated Arbitrary Shortcode Execution Python 3 PoC scanner/exploit for CVE-2026-92229 in Forminator WPMU DEV. | ---|--- Plugin| forminator Affected| ≤ 1.57.2 Fixed in| 1.57.3+ CVSS| 9.1 Critical Auth| Unauthenticated Vector| POST parameter currenturl quiz AJAX...

PS5-IPV6-Kernel-Exploit

PS5 3.xx / 4.xx Kernel Exploit Summary This repo contains an experimental WebKit ROP implementation of a PS5 kernel exploit based on TheFlow's IPV6 Use-After-Free UAF , which was reported on HackerOne. The exploit strategy is for the most part based on TheFlow's BSD/PS4 PoC with some changes to...

CVE-2022-31491

CVE-2022-31491 Metasploit module and PoC files in this repo. Further Information Voltronic Viewpower/Pro and rebrands/derivatives The UPS management software normally allows a properly Authenticated and Authorized user using a web interface to configure the system to run a single OS command of th...

poc-CVE-2024-23897

poc-CVE-2024-23897 CVE-2024-23897: Jenkins Arbitrary File Read Lead to RCE 🎯 Affected Products and Versions Product: Jenkins Continuous Integration/Continuous Delivery server Versions: Jenkins 2.441 and earlier, Jenkins LTS 2.426.2 and earlier Fixed in: Jenkins 2.442, Jenkins LTS 2.426.3 📝...

CVE-2025-70341

CVE-2025-70341: Insecure Permissions + Arbitrary Code Execution in App-Auto-Patch Summary App-Auto-Patch v3.4.2 creates its working directory with world-writable permissions chmod 777, enabling a local TOCTOU time-of-check-time-of-use race condition. An unprivileged local attacker can exploit thi...

CVE-2018-11235

CVE-2018-11235 Vulnerability Overview Vulnerability Name: Git Security Vulnerability CNNVD ID: CNNVD-201805-1020 Severity Level: High CVE ID: CVE-2018-11235 Vulnerability Type: Security Feature Issue Published Date: 2018-05-31 Threat Type: Remote Updated Date: 2019-04-01 Vendor: git-scm...

Blackash-CVE-2025-32023

CVE-2025-32023 - Redis Remote Code Execution RCE 🚨 🧠 Overview: A critical RCE vulnerability affecting Redis 7.2.4, where attackers can load malicious modules using the MODULE LOAD command. 🕳️ Vulnerability Type: Remote Code Execution RCE 💥 Impact: An unauthenticated attacker can execute arbitrary...