19269 matches found
Exploit for CVE-2025-10353
CV...
CVE2009-2585_HP_Power_Manager_BoF
CVE2009-2585HPPowerManagerBoF This repository contains a P...
📄 OWASP CRS WAF Bypass
OWASP core rule set CRS versions prior to 4.22.0 and 3.3.8 suffer from a bypass vulnerability. CVE-2026-21876 OWASP CRS WAF bypass CVE-2026-21876 docker container + minimal PoC. I would like to thank @airween and @fzipi separately for their quick response! The vulnerability fix was ready in a ver...
exploitation-validator
exploitation-validator, an Exploitability Validation System A...
CVE-2026-27621
creationtimestamp| type| source ---|---|--- 2026-02-21 22:21:45+00:00| published-proof-of-concept| https://github.com/typicms/core/security/advisories/GHSA-xfvg-8v67-j7wp...
CVE-2026-27612
creationtimestamp| type| source ---|---|--- 2026-02-21 16:44:48+00:00| published-proof-of-concept| https://github.com/denpiligrim/repostat/security/advisories/GHSA-fm8c-6m29-rp6j...
Exploit for CVE-2026-27574
CVE-2026-27574-OneUptime-RCE !Authorhttps://img.shields.io/...
Exploit for Code Injection in Vmware Spring_Framework
ДЗ 10 — Python для аналитиков ИБ: эксплойты Описание уязви...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Heavily influenced/copied/based on the format of a similar repo...
go-container-poc
go-contai...
📄 Selenium Server (Grid) 4.27.0 Code Injection
Proof of concept exploit for Selenium Server Grid versions 4.27.0 and below that exploits firefoxprofile to force the browser to run bash commands. ============================================================================================================================================= | Title...
AndroWasm: An Empirical Study on Android Malware Obfuscation through WebAssembly
In recent years, stealthy Android malware has increasingly adopted sophisticated techniques to bypass automatic detection mechanisms and harden manual analysis. Adversaries typically rely on obfuscation, anti-repacking, steganography, poisoning, and evasion techniques to AI-based tools, and...
📄 Sophos Web Virtual Appliance 3.7.0 Directory Traversal
Proof of concept exploit for an older vulnerability from 2013 where Sophos Web Virtual Appliance version 3.7.0 suffered from a directory traversal vulnerability...
Exploit for CVE-2026-5252
CVE-2026-...
Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access
CVE-2026-1731 Blind RCE PoC Effected Versions: - Privi...
📄 RustFly 2.0.0 Event Manipulation
The remote UI control mechanism of RustFly accepts raw hex-encoded instructions over UDP. Some sequences trigger execution of remote system-level operations. Improper sanitization allows command-level injection. Version 2.0.0 is affected...
📄 motionEye 0.43.1b4 Remote Command Injection
A remote command injection vulnerability exists in motionEye versions up to and including 0.43.1b4. The issue arises from improper validation and sanitization of user‑supplied input within camera configuration parameters. Under certain conditions, authenticated users can inject crafted input that...
📄 RuoYi 4.7.9 Advanced SQL Injection Exploitation Toolkit
This Python script is a sophisticated SQL injection exploitation tool that targets Java web applications specifically RuoYi framework, with additional remote code execution capabilities. The tool performs blind SQL injection attacks and includes multiple methods for escalating from SQL injection ...