RawrXDA

RawrXD PE Writer - Complete Implementation Overview This is a complete PE32+ writer and machine code emitter implemented in pure x64 MASM assembly with zero dependencies and no CRT usage. It generates runnable Windows executables from scratch. Architecture The PE writer follows a backend designer...

C-Game-Modding-Utility

C/C++ Game Modding Utility This utility aims to make writing mods for 5th/6th generation console games in C/C++ easier. It handles all the tedious setup, letting you focus on actually writing code. No manual cross-compiler setup. No manual ISO rebuilding. No complicated testing workflows. Feature...

RCE-Simplephpblog-biggiedroid

CVE-2025-15495 - Arbitrary File Upload Leading to Remote Code Execution RCE Product BiggiDroid – Simple PHP Blog CMS Product page: https://biggidroid.com/product/simple-php-blog/ Vulnerability Type Arbitrary File Upload Unrestricted File Upload Remote Code Execution RCE Severity Critical CVSS...

WebminRCE-EXP-CVE-2019-15107-

CVE-2019-15107: Exploit Modules Available for Remote Code Execution Vulnerability in Webmin 1. Vulnerability Description Webmin is a powerful web-based system administration tool, widely used on Unix systems. Due to a command injection vulnerability in the old parameter during the processing of...

CVE-2016-10033

CVE-2016-10033 This vulnerability affects PHPMailer 5.2.18 and is able to get Remote Code Execution. Resources https://vulners.com/cve/CVE-2016-10033 Usage As it is written in Golang, you can build the exploit yourself, as long there is golang installed into your system with: cd CVE-2016-10033 go...

CVE-2025-54123

CVE-2025-54123 Hoverfly Command Injection to RCE PoC Overview This repository contains a Python proof-of-concept PoC script for interacting with Hoverfly instances affected by CVE-2025-54123. The script supports: Authentication using username/password credentials Authentication using an existing...

WonderCMS-4.3.2-XSS-to-RCE-Exploits-CVE-2023-41425

WonderCMS 4.3.2 XSS to RCE Exploits Overview These scripts exploit an XSS Cross-Site Scripting vulnerability in WonderCMS 4.3.2 to achieve Remote Code Execution RCE. The XSS payload, when triggered by the admin, automatically installs a reverse shell on the target server by leveraging a crafted...

EUVD-2026-118481

CRIU is a checkpoint and restore tool for Linux. Prior to 4.2.1, CRIU injects a syscall;int3 sequence at the start of the first executable virtual memory area and resumes the target process to execute parasite code. Malicious code in the target process can keep an rseq critical section armed over...

CVE-2026-73860

The CRIU (checkpoint and restore tool for Linux) tool is vulnerable to a parasite hijack in versions prior to 4.2.1 . The root cause involves CRIU injecting a syscall;int3 sequence at the start of the first executable virtual memory area to resume target processes. Malicious code within the targe...

CVE-2026-73860 CRIU: Parasite hijack triggered by snapshot of malicious software

CRIU is a checkpoint and restore tool for Linux. Prior to 4.2.1, CRIU injects a syscall;int3 sequence at the start of the first executable virtual memory area and resumes the target process to execute parasite code. Malicious code in the target process can keep an rseq critical section armed over...

CVE-2026-116241

A flaw was found in pgadmin4. This vulnerability allows an authenticated user to achieve arbitrary code execution on the underlying host running the application. By submitting a specially crafted export query with backslash-escaped quotes in the Import/Export Data feature, an attacker can exploit...

DeepSleep

DeepSleep A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC. Huge thanks to @waldoirc for documenting large parts of this technique on his blog This implementation is different in that it does not make use of any APCs and is fully implemented as PIC. Description I have...

CVE-2026-90975

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged user to abuse a kernel I/O control IOCTL interface that acts on a caller-supplied user-mode pointer without proper validation or capture. By issuing crafted property requests an attacker can obtain kernel-mo...

CVE-2024-39069

ifood Order Manager 'Gestor de Peddios.exe' - DLL hijacking An attacker places a malicious DLL named "d3d12.dll" in a directory that is searched by the application before the legitimate "d3d12.dll" is found. When the application is launched, it loads the malicious DLL instead of the legitimate on...

CVE-2023-21971_Analysis

CVE-2023-21971 Connector/J RCE Analysis References Remote Code Execution RCE in com.mysql:mysql-connector-j | CVE-2023-21971 | Snyk New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access MYSQL JDBC Deserialization Analysis - 跳跳糖 tttang.com Vulnerability Overview Vulnerability in...

CVE-2026-115731

Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report containing a crafted...

CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List Unauthenticated RCE Exploit An automated exploit and scanner for CVE-2025-34085 , a critical vulnerability in the WordPress Simple File List plugin, enabling unauthenticated remote code execution through arbitrary file upload and rename functionalities....

Deep-Reaver

Deep Reaver Deep Reaver is a powerful, AI-enhanced vulnerability assessment and exploitation toolkit built in Python. Inspired by tools like Nmap and Nessus, Deep Reaver is designed for deep, modular scanning of web applications and services. Features AI-assisted analysis via aiassistant.py Modul...

CVE-2026-6009

⚠️ Disclaimer: This repository is for educational purposes and authorized security testing only. Do not use against systems you do not own or have explicit written permission to test. CVE-2026-6009 Proof of Concept Summary The Jaspersoft report library version = 7.0.3 is vulnerable to a remote cod...

CVE-2026-90975 CVE-2026-90975

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged user to abuse a kernel I/O control IOCTL interface that acts on a caller-supplied user-mode pointer without proper validation or capture. By issuing crafted property requests an attacker can obtain kernel-mo...