CVE-2025-32463-EXPLOIT

Xpl0it — Sudo NSS Library Hijack | v0.0.4 Author: 0xb0rn3 | 0xbv1 Type: Proof of Concept PoC Security Research Tool CVE: CVE-2023-42456 Technique: sudo -R chroot NSS library injection → privilege escalation to root ⚠️ Disclaimer This tool is developed for authorized penetration testing and...

CVE-2025-8110-Gogs-Remote-Code-Execution

Affected Software: Gogs self‑hosted Git service versions prior to 0.13.0. Vulnerability Type: Command injection in the Git hook mechanism. Description: An attacker with push access to a repository can craft a malicious Git hook that injects commands into the post‑receive hook script, leading to...

logparser

Logparser Logparser provides a machine learning toolkit and benchmarks for automated log parsing, which is a crucial step for structured log analytics. By applying logparser, users can automatically extract event templates from unstructured logs and convert raw log messages into a sequence of...

-CVE-2025-59528-PoC

CVE-2025-59528-PoC FOR EDUCATIONAL PURPOSES ONLY A simple python script to exploit CVE-2025-59528, this an Authenticated RCE vulnerability in Flowise application, a popular AI tool, that is also part of an HTB seasonal challenge, on which I tested it btw. If it's not working, make sure the comman...

CVE-2018-15133-PoC

CVE-2018-15133-PoC This Python script implements a remote code execution RCE exploit for vulnerable Laravel applications through insecure deserialization, based on the CVE-2018-15133 vulnerability. The exploit takes advantage of a vulnerability in Laravel versions 5.5.40 and earlier, and 5.6.0 to...

CVE-2025-53770

CVE-2025-53770 Research Lab This repository appears to be a proof-of-concept research project for validating a SharePoint-style deserialization and tool-pane processing issue in a controlled lab. It includes a Python driver, a mock vulnerable application, and container assets for isolated testing...

CVE-2023-48223

CVE-2023-48223 PoC fast-jwt Algorithm Confusion This repository demonstrates JWT algorithm confusion in fast-jwt when token verification does not lock allowed algorithms. Environment Setup Requirements Node.js 18 or newer npm OpenSSL must be available in your terminal PATH 1 Install dependencies...

Exploit-PoC-para-CVE-2024-30085

🚨 Exploit PoC for CVE-2024-30085 Proof of Concept exploit for the CVE-2024-30085 privilege escalation vulnerability. For educational and security research purposes only. ⚠️ Legal Warning FOR EDUCATIONAL USE ONLY ✅ Authorized security research ✅ Controlled laboratories ✅ Cybersecurity education ❌...

dfir-orc

DFIR ORC French Cybersecurity Agency ANSSI This project is managed byANSSI. To find out more, you can visit the page in French dedicated to ANSSI’s open-source strategy. You can also click on the badges above to learn more about their meaning. Documentation https://dfir-orc.github.io Build Status...

PacketPirate

PacketPirate A headless , scriptable, command-line based MITM proxy designed for network traffic interception, analysis, and modification on Windows systems. It operates similarly to industry-standard GUI proxies but is optimized for automation environments, headless operation, and integration wi...

CVE-2025-11953-PoC

Description The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and r...

CVE-2025-56803

CVE-2025-56803 OS Command Injection Vulnerability via Plugin Execution in Figma Desktop Application 1. Overview Application : Figma Desktop Application Version : 125.6.5 Vendor : Figma, Inc. CWE : CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' CVS...

0-click-RCE-Exploit-for-CVE-2024-51793

CVE-2024-51793 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858668072279626138 This repository contains a proof-of-concept exploit for CVE-2024-51793, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress plugin, leading to remote...

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Elastic Security Labs has documented four previously unreported programs associated with REVSTEALER, an emerging Windows information stealer, that remain on an infected machine after the stealer deletes itself. One of them switches off Windows Update and Microsoft Defender before running a...

CVE-2023-40289

CVE-2023-40289 This is an exploit for CVE-2023-40289, a command injection vulnerability in several Baseband Management Controllers BMC by with firmware by ATEN. Examples of affected devices include Aspeed's AST2300 or AST2500, which can be found on Supermicro's X10 and X11 series server systems,...

CVE-2025-55182-poc-tool

CVE-2025-55182-poc-tool A powerful exploit tool for detecting and exploiting CVE-2025-55182 vulnerability in Next.js React Server Components. This tool allows remote command execution RCE in vulnerable Next.js applications with built-in WAF bypass capabilities. Overview CVE-2025-55182 is a critic...

CVE-2024-0670

CVE-2024-0670 – Local Privilege Escalation in CheckMK Agent PowerShell PoC Abstract This repository presents an independent PowerShell proof of concept for CVE-2024-0670 , a Windows local privilege escalation vulnerability in the CheckMK Agent. The vulnerability allows a low-privileged local user...

CVE-2024-21532-PoC-ggit

CVE-2024-21532 Command Injection vulnerability in ggit ggit describes itself as: root@kitploit: Local promise-returning git command wrappers Resources: Project's GitHub source code: https://github.com/bahmutov/ggit Project's npm package: https://www.npmjs.com/package/ggit Article write-up on this...

IngressNightterror

IngressNightterror CVE-2025-1974 Overview This repository is my research on IngressNightmare vulnerability. It includes a vulnerable Ingress deploy files, exploit itself and shared object payload. CVE The list of CVE indexes: CVE-2025-1974 - Root vulnerability CVE-2025-24514 - auth-url annotation...

coolify-cve-2025-66209-66213

Coolify Security Advisories - CVE-2025-66209 through CVE-2025-66213 Reporter: 0xrakan Vendor: coollabsio/coolify Affected Versions: v4.0.0-beta.451 Fixed Version: v4.0.0-beta.451 Severity: Critical CVSS 9.4 Overview Five critical authenticated command injection vulnerabilities were discovered in...