PoC--CVE-2019-10149_Exim

PoC-CVE-2019-10149Exim MNEMO-CERT has developed a PoC that allows executing commands with elevated privileges by exploiting the vulnerability CVE-2019-10149, which affects different versions of Exim 4.87 - 4.91. To perform local exploitation of this vulnerability it is necessary to define the...

asf__james-project_CVE-2022-22931_3-6-0

Apache James Project :latestjamesversion: 3.8.0 image:https://img.shields.io/badge/Join%20us-Mailing%20lists-purple.svglink="https://james.apache.org/mail.html" link:https://gitter.im/apache/james-projectimage:https://badges.gitter.im/apache/james-project.svgJoin the chat at...

CVE-2026-40176-poc

CVE-2026-40176: Composer Perforce OS Command Injection PoC Description This repository contains a Proof of Concept PoC for CVE-2026-40176 , a critical OS Command Injection vulnerability discovered in Composer 's Perforce VCS driver versions prior to 2.2.27 and 2.9.6. The vulnerability exists in t...

Vulnerability-CVE-2025-64446-CVE-2025-58034

FortiWeb Exploitation Simulation CVE-2025-64446 & CVE-2025-58034 Note: This document is for educational and security research purposes only. Do not use to attack systems without permission. 1. Overview FortiWeb is a Web Application Firewall WAF device used to protect web applications. In 2025, tw...

CVE-2020-17456

Description On August 21, 2020, seown SLC 130 router was exposed to have an authentication rce vulnerability. The vulnerability number is cve-2020-17456. The vulnerability is due to the ping command injection in the router's Web service diagnosis function. Combined with several groups of hard cod...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

domi-owned

Domi-Owned Summary Domi-Owned is a tool used for compromising IBM/Lotus Domino servers. Tested on IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0, and 9.0.1 running on Windows and Linux. Requirements Domi-Owned uses Python 3, which can be install through your distribution's package manager apt, yum, etc...

CVE-2026-47323

camel-cxf-rest / camel-cxf / camel-knative-http Header Injection Reproducer CVE-2026-47323 This project demonstrates a message-header injection in Apache Camel's CXF and Knative HTTP header-filter strategies, tracked as CVE-2026-47323. CxfRsHeaderFilterStrategy camel-cxf-rest,...

strace

strace - the linux syscall tracer This is strace -- a diagnostic, debugging and instructional userspace utility with a traditional command-line interface for Linux. It is used to monitor and tamper with interactions between processes and the Linux kernel, which include system calls, signal...

CVE-2025-24893

CVE-2025-24893 PoC | XWiki Platform 15.10.10 - Remote Code Execution An RCE Remote Code Execution category vulnerability, found when unauthenticated attackers can execute arbitrary Groovy code remotely without authentication or prior access Guest User. Below is a PoC Proof-Of-Concept in Python fo...

CVE-2023-0669

CVE-2023-0669 GoAnywhere MFT Deserialization - Je Yiuwai's Blog CVE-2023-0669 CVE-2023-0669 is a GoAnywhere MFT deserialization vulnerability. Due to the deserialization of an arbitrary attacker-controlled object, a pre-authenticated command injection vulnerability exists in the License Response...

linux-exploit-suggester

LES: Linux privilege escalation auditing tool Quick download: wget https://raw.githubusercontent.com/mzet-/linux-exploit-suggester/master/linux-exploit-suggester.sh -O les.sh Details about LES usage and inner workings: https://blog.z-labs.eu/2019/05/10/les-paper.html Additional resources for the...

CVE-2026-49869

Kestra CVE-2026-49869 / CVE-2026-53576 Scanner Scans Kestra instances for the endsWith"/configs" authentication filter bypass. Kestra's AuthenticationFilter.java checks request.getPath.endsWith"/configs" instead of matching the exact path /api/v1/configs. Since Kestra addresses resources via...

CVE-2026-11613

CVE-2026-11613 — Divi Ajax Filter RCE | ---|--- Plugin| Divi Ajax Filter Divi Engine, premium — bukan di wordpress.org SVN Affected| semua versi = 5.1.2 lab memakai 3.1.8.4 dari mirror Patched| 5.1.3 11/08/2026 Tipe| CWE-98 — PHP Local File Inclusion, unauthenticated CVSS| 9.8 Critical...

CVE-2021-28312

CVE-2021-28312 POC and description for CVE-2021-28312 Windows NTFS Denial of Service Vulnerability Link: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-28312 Reproduction From cmd: type following command cd c::$i30:$bitmap Remote exploitation possibility: Can be done by...

LOAD

Intro Based on AWS-Redteam-Lab and OCD GOAD The price for running the lab for 125 hours during one month is approximately 14$. With Free Tier you get 750h of EC2 per month, there is 6 machines so 125h. But you only get 30Gb of storage. So you need storage for the other 5 VMs : 30Gb 5 = 150Gb = 14...

CVE-2025-55182-in-go

CVE-2025-55182 — React Server Components RCE Exploit for RCE in React Server Components via prototype pollution. Usage go run main.go -t -c Examples go run main.go -t http://127.0.0.1 -c "id" go run main.go -t http://127.0.0.1 -c "ls -la" go run main.go -t http://127.0.0.1 -c "cat /etc/passwd"...

checker-CVE-2024-6387

OpenSSH Vulnerability Checker Overview This script scans a list of target IP addresses or ranges to determine if they are running vulnerable To CVE-2024-6387. Features Scans IP addresses, domain names, file paths containing IP addresses, or CIDR network ranges. Checks a specified port default: 22...

auto-re-agent

re-agent Autonomous reverse-engineering agent — source-aware reverser/checker loop, objective verifier, parity engine, and Ghidra backend. Overview Demo: YouTube re-agent automates a reverse-engineering workflow by combining a reverser/checker loop with Ghidra decompilation through...

sigma

Sigma - Generic Signature Format for SIEM Systems Welcome to the Sigma main rule repository. The place where detection engineers, threat hunters and all defensive security practitioners collaborate on detection rules. The repository offers more than 3000 detection rules of different type and aims...