CVE-2023-23752

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023–23752 This readme file provides information about the Joomla Unauthorized Access Vulnerability CVE-2023–23752 and how to detect. This vulnerability allows an attacker to bypass the Joomla access control system and gain unauthorized...

Spring4Shell

Spring4Shell In this challenge, I analyzed the Spring4Shell CVE-2022-22965 vulnerability, investigated security bypasses, and wrote an Incident Postmortem Report detailing the detection, impact, and resolution of the attack. I also implemented a firewall rule in Python to block malicious requests...

efiguard-detected

efiguard-detect dumbest possible way to check if EfiGuard killed your patchguard or not. how it works efiguard leaves a SetVariable backdoor at runtime - we just poke it from usermode asking to read 2 bytes at ntoskrnl base. if we get back MZ - the backdoor is alive, efiguard did its thing, pg is...

CVE-2024-6670

CVE-2024-6670 PoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability CVE-2024-6670 A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/ Usage root@kitploit: python...

cve-2025-29927-poc

CVE-2025-29927-POC Introduction This repository contains a Proof of Concept PoC for CVE-2025-29927, a hypothetical vulnerability demonstrating a flaw in middleware handling within a web application. The PoC illustrates how a specially crafted HTTP request can bypass redirection logic to access...

CVE-2026-6485

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...

BadParcel

BadParcel See Bundle Fengshui for a deep dive on this bug class. This repository contains PoC for CVE-2023-20963, which is mismatch in the Android WorkSource parcel/unparcel logic. The vulnerability is patched on Android's Security Bulletin of March 2023. The exploit should work on devices on AOS...

CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

CVE-2021-27289

🐝 CVE-2021-27289: Playback Protection Bypass on Ksix Zigbee devices 📑 Table of Contents Before We Get Serious The Story Behind This CVE Vulnerability Affected Devices Technical Details Attack Scenario Impact Proof of Concept Demo Videos Original Blog Post Researcher Zigbee Basics Background and...

CVE-2022-40684-metasploit-scanner

CVE-2022-40684-metasploit-scanner An authentication bypass using an alternate path or channel in Fortinet product preparation POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2022-40684-metasploit-scanner cd CVE-2022-40684-metasploit-scanner mkdir -p...

CVE-2017-6640-POC

CVE-2017-6640-POC Proof of concept for CVE-2017-6640 as burp extension Cisco Prime Data Center Network Manager DCNM implements a static credentials. See also: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 More specifically, the Web UI requires users...

CVE-2024-4358

CVE-2024-4358 / CVE-2024-1800 Telerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800 Technical Analysis A root cause analysis of the vulnerability can be found on my blog poc Summary Supported versions? Basically all of them at the time the...

CVE-2020-1472-LAB

ZeroLogon testing script A lab setup to test a vulnerability for the ZeroLogon exploit CVE-2020-1472. It contains a Python script that uses the Impacket library to test the vulnerability, and a Virtual Machine VM with Windows Server 2019 configured as a Domain Controller DC. The script attempts t...

WMIHACKER

WMIHACKER（No necesita puerto 445） 中文版Chinese version Exención de responsabilidad: La tecnología involucrada en este proyecto es solo para fines de aprendizaje y defensa de seguridad, ¡está prohibido su uso ilegal! Herramienta de prueba de ejecución de comandos de movimiento lateral que evita el...

bitlocker-hardening

🔐 yellowkey-mitigation BitLocker TPM+PIN Hardening Against CVE-2026-45585 YellowKey Automated mitigation for the WinRE BitLocker bypass — no full patch available yet 🔍 The Vulnerability YellowKey is a publicly disclosed BitLocker bypass that gives an attacker with physical access an unrestricted...

cacti-cve-2022-46169-exploit

CVE-2022-46169 PoC: Authentication Bypass and Remote Code Execution This repository contains a PoC for the CVE-2022-46169 vulnerability, which allows an attacker to bypass authentication and execute arbitrary code remotely on the affected system. This vulnerability affects Cacti, version 1.2.22,...

firefox: thunderbird: Mitigation bypass in the Safe Browsing component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...

firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: Cookies component...

firefox: thunderbird: Mitigation bypass in the Storage: Cache API component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Storage: Cache API component...

firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Graphics: ImageLib component...