19297 matches found
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
CVE-2020-0796 PoC aka CoronaBlue aka SMBGhost Usage ./CVE-2020-0796.py servername This script connects to the target host, and compresses the authentication request with a bad offset field set in the transformation header, causing the decompressor to buffer overflow and crash the target. This...
Exploit for OS Command Injection in Gnu Bash
Exploits Miscellaneous proof of concept exploit code written at Xiphos Research for testing purposes. Current Exploits index may be out of date phpMoAdmin Remote Code Execution CVE-2015-2208 LotusCMS Remote Code Execution OSVDB-75095 ElasticSearch Remote Code Execution CVE-2015-1427 ShellShock...
IOHIDeous
IOHIDeous A macOS kernel exploit based on an IOHIDFamily 0day. Write-up here. Notice The prefetch timing attack I'm using for hid for some reason doesn't work on High Sierra 10.13.2 anymore, and I don't feel like investigating that. Maybe patched, maybe just the consequence of a random change, I...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android
This repository contains a PoC Proof of Concept code for the BlueBorne vulnerabilities. The BlueBorne vulnerabilities are a set of vulnerabilities in Bluetooth devices that allow an attacker to remotely execute code on a device. The PoC code is written in Python and uses the PyBluez library to...
Exploit for CVE-2020-0609
BlueGate Proof of Concept Denial of Service + scanner for CVE-2020-0609 and CVE-2020-0610. These vulnerabilities allows an unauthenticated attacker to gain remote code execution with highest privileges via RD Gateway for RDP. Please use for research and educational purpose only. Usage Make sure y...
CVE-2025-8220
creationtimestamp| type| source ---|---|--- 2025-07-27 03:00:05+00:00| published-proof-of-concept| Telegram/cFf3nf01Jtskw4JUcMDQ8X2aYFQSVN6Id1bXBoqDA3vOsA 2025-07-27 11:00:09+00:00| published-proof-of-concept| Telegram/AfTJKcZEqQRiwkgCxUS4ELJ1Qe5RhSl-9xmB44se0uu3--o...
Trivial Trojans: How Minimal MCP Servers Enable Cross-Tool Exfiltration of Sensitive Data
The Model Context Protocol MCP represents a significant advancement in AI-tool integration, enabling seamless communication between AI agents and external services. However, this connectivity introduces novel attack vectors that remain largely unexplored. This paper demonstrates how unsophisticat...
Exploit for CVE-2025-54782
CVE-2025-54782 RCE POC Read more: - https:...
Exploit for CVE-2025-32429
CVE-2025-32429 XWiki SQL Injection PoC Author: Byte Reape...
CVE-2025-54413
creationtimestamp| type| source ---|---|--- 2025-07-25 16:59:07+00:00| published-proof-of-concept| https://github.com/skops-dev/skops/security/advisories/GHSA-4v6w-xpmh-gfgp...
CVE-2025-51411
creationtimestamp| type| source ---|---|--- 2025-07-25 09:00:04+00:00| published-proof-of-concept| Telegram/jNcdIPPUFRbETtfhaleVicpZBJRzPRjgUorR0kd4jL9lPcM...
Exploit for CVE-2025-1302
CVE-2025-1302 JSONPath-Plus RCE PoC PoC Script Name: po...
CVE-2025-50777
creationtimestamp| type| source ---|---|--- 2025-07-23 17:24:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/45107 2025-07-23 21:00:04+00:00| published-proof-of-concept| Telegram/EYkASGxj3Tiuz3kIHRMz13gpRd2GwQ5wKmXB5D8I7ZTChs4...
CVE-2025-8018
creationtimestamp| type| source ---|---|--- 2025-07-23 15:00:12+00:00| published-proof-of-concept| Telegram/4bgVtt-c2g6B5f0tuhNllyXVx8wqByVM4qaJsK1Ar8yXTY 2025-07-23 21:00:04+00:00| published-proof-of-concept| Telegram/EYkASGxj3Tiuz3kIHRMz13gpRd2GwQ5wKmXB5D8I7ZTChs4...
Exploit for SQL Injection in Carmelo Food_Ordering_Review_System
CVE-2025-8018 Exploit – Food Ordering Review System v1.0 This...
CVE-2021-24351
creationtimestamp| type| source ---|---|--- 2025-07-23 11:38:17+00:00| published-proof-of-concept| Telegram/YVDZ6Z1GZDQX-M27bcnI1Eczx20-ar1zLa08DQIhSJhuixVzM 2025-07-23 11:38:44+00:00| published-proof-of-concept| Telegram/0Y9KvXKgehqB7mcjHMKz2flcfUKEAFAeNRTaHib5QaAQzs 2025-07-23 11:40:33+00:00|...
📄 Microsoft Edge Cross Site Scripting Filter Bypass
Microsoft Edge cross site scripting filter bypass proof of concept exploit. Titles: Microsoft Edge XSS Filter Bypass PoC Author: nu11secur1ty Date: 2025-07-18 Vendor: Microsoft Software: Microsoft Edge Browser Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6176 Description Thi...
CVE-2025-54134
creationtimestamp| type| source ---|---|--- 2025-07-21 18:02:23+00:00| published-proof-of-concept| https://github.com/haxtheweb/issues/security/advisories/GHSA-pjj3-j5j6-qj27...