nanwinata-CVE-2024-52301

This script using simple tools subfinder,httpx. Laravel is a web application framework. When the registerargcargv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The...

CVE-2025-10230

CVE-2025-10230 PoC for CVE-2025-10230 - Samba WINS hook command injection The configuration required for this vulnerability probably affects 0 people. The injection is limited to 15 characters and must be a valid WINS name so no ;...

CVE-2026-23520

CVE-2026-23520 MCP API Remote Command Execution RCE PoC 📌 Overview This repository contains a Proof-of-Concept PoC exploit for a Remote Command Execution RCE vulnerability affecting applications that expose a vulnerable MCP API endpoint commonly /api/mcp/connect. The vulnerability allows executio...

CVE-2026-26416

CVE-2026-26416 Authorization Bypass Vulnerability Leading to Privilege Escalation Vulnerability Summary A privilege escalation vulnerability was identified in Tata Consultancy Services TCS – Cognix Recon Client v3.0. The issue allowed authenticated users to elevate privileges across defined role...

CVE-2026-88647

A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...

CVE-2026-20841

The accuracy of this PoC trigger method has not been verified, and it should be considered informational/reference only. CVE-2026-20841 - Windows notepad.exe RCE Exploitation condition: Test on : Notepad Version 11.2510.14.0 step 1 : Save File step 2 : Open file Note: It does prompt to open progr...

CVE-2026-4447

CVE-2026-4447 - V8 in Google Chrome prior to Remote Code Execution Quick Usage python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2026-03-20 Technical Summary...

CVE-2026-2441

CSS in Google Chrome prior to Remote Code Execution CVE-2026-2441 Overview A HIGH vulnerability, classified as CVE-2026-2441, has been identified, categorized under CWE-416, CWE-416, CVSS 8.8. Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute...

netbsd_hfs

NetBSD hfs local overflow Bug details: sizet hfslibreadanodeoffsetsvoid inbytes, uint16t outoffsetarray void ptr; if inbytes == NULL || outoffsetarray == NULL return 0; ptr = inbytes; / The offset for record 0 which is the very last offset in the node is always equal to 14, the size of the node...

CVE-2026-21962

🚨 CVE-2026-21962 - Vulnerabilidad Crítica de Omisión de Autenticación 🧾 Resumen 🔥 Una vulnerabilidad de severidad máxima 10.0 que permite acceso remoto sin autenticación a sistemas middleware de Oracle. CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category : Authentication...

CVE-2025-64512

CVE-2025-64512 — pdfminer.six Insecure Deserialization Pickle via Crafted PDF ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal. Table o...

CVE-2020-11932

CVE-2020-11932 Error de Double-Free en el exploit poc de WhatsApp. Nota: Asegúrate de configurar la IP del listener en exploit.c para obtener una shell nc -lvp 1337 o cualquier puerto. y luego compila. make o gcc -o exploit egiflib.c exploit.c luego ejecuta ./exploit y guarda el contenido en .gif...

CVE-2022-42475-RCE-POC

CVE-2022-42475-RCE-POC Nombre de la vulnerabilidad POC de la vulnerabilidad RCE de Fortinet CVE-2022-42475 Causa de la vulnerabilidad Debido a un defecto en la validación del contenido introducido por el usuario en sslvpnd, un atacante no autenticado puede provocar un desbordamiento de búfer...

practice-22-23

Proyecto Para ejecutar: ./script.sh Repositorio en GitHub - https://github.com/LaCinquette/practice-22-23 Desarrollo 1. Para buscar la vulnerabilidad elegí el proyecto FFmpeg. Encontré en él un commit que cumplía los requisitos, a saber: Correspondía al tipo CWE-476 - desreferencia de puntero nul...

CVE-2020-2555

EXP prueba...

vsftpd-234-vuln-report

💥 vsftpd 2.3.4 Backdoor Exploit Report Exploitation of a known vulnerability in vsftpd 2.3.4 using Metasploit. 📌 Target Details Target IP: 192.168.150.133 Service: FTP Vulnerable Version: vsftpd 2.3.4 Exploit Module: exploit/unix/ftp/vsftpd234backdoor Payload: Command shell TCP 🔍 Vulnerability...

cve-2020-9375

CVE-2020-9375 TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field. Exploit Title : TP-Link Archer C50 v3 Denial of Service Date : 25-01-2020 Exploit Author : thewhiteh4t...

CVE-2023-23397

CVE-2023-23397: Remote Code Execution Vulnerability in Microsoft Outlook CVE-2023-23397 is a remote code execution vulnerability in Microsoft Outlook, a popular email client used by millions of users worldwide. This vulnerability was discovered by security researcher Leandro Costa and reported to...

Exim-CVE-2019-15846

Exim CVE-2019-15846 PoC materials to exploit CVE-2019-15846. Blogpost explaining the PoC is available on Synacktiv Blog. This PoC help generate spool files used exploit a heap overflow in exim. Two example spool files are given in 1i7Jgy-0002dD-Pb-D and 1i7Jgy-0002dD-Pb-H. A specialy crafted spoo...

CVE-2022-30292

CVE-2022-30292 Descripción Esta vulnerabilidad es el desbordamiento de búfer basado en montón en la función threadcall en Squirrel 3.2 y versiones anteriores. Está causada por la falta de la llamada a la función sqreservestack. Esta vulnerabilidad conduce a una denegación de servicio DoS del...