CVE-2026-104956

Plane is an open-source project management tool. Prior to 1.4.0, the unauthenticated public issues endpoint accepts groupby and subgroupby query parameters and passes them without an allowlist to grouped paginators, where they are used as ORM field names by Ffield, .valuesfield, .orderbyfield, an...

BlueGate

BlueGate Proof of Concept Denial of Service + scanner for CVE-2020-0609 and CVE-2020-0610. These vulnerabilities allows an unauthenticated attacker to gain remote code execution with highest privileges via RD Gateway for RDP. Please use for research and educational purpose only. Usage Make sure y...

CVE-2026-43499-PoC-Scanner

CVE-2026-43499 PoC Scanner This repository contains a Go-based scanner and proof-of-concept implementation for a Linux kernel vulnerability related to CVE-2026-43499. The project is intended for research, defensive analysis, and authorized security testing only. Overview The code in this reposito...

xerosploit

Xerosploit Xerosploit is a penetration testing toolkit whose goal is to perform man in the middle attacks for testing purposes. It brings various modules that allow to realise efficient attacks, and also allows to carry out denial of service attacks and port scanning. Powered by bettercap and nma...

blueborne-CVE-2017-1000251

Linux Kernel 4.13.1 - BlueTooth Buffer Overflow PoC BlueBorne - Proof of Concept - Unarmed/Unweaponized - DoS Crash only This is a copy of the initial repository published by @marcinguy who then took it down and made private...

CVE-2020-15999

CVE-2020-15999 CVE-2020-15999 Added font with SBIX table based on Arial - https://docs.microsoft.com/en-us/typography/opentype/spec/sbix Crashes in ftview asan.png but somehow cannot bring Chrome to crash Flags are also not correctly set so loadsbitimage is also not called. Weird. Calling it like...

ufonet

Website: https://ufonet.03c8.net Description: UFONet - is a free software, P2P and cryptographic -disruptive toolkit- that allows to perform DoS and DDoS attacks; on the Layer 7 APP/HTTP through the exploitation of Open Redirect vectors on third-party websites to act as a botnet and on the Layer3...

CVE-2021-31166-Exploit

CVE-2021-31166-Exploit Exploit for MS Http Protocol Stack RCE vulnerability CVE-2021-31166 A specially crafted Http request targetting a vulnerable windows version will result into DOS attack. And the server will be rebooted with blue screen error. Http.sys is a windows kernel driver responsible...

An-Integrated-Wireless-Network-Forensic-Analysis-Framework

An-Integrated-Wireless-Network-Forensic-Analysis-Framework This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able to capture wireless network traffic, to analyze the captured traffic according to the...

CVE-2017-8056

CVE-2017-8056 CVE-2017-8056 XML-RPC Exploit DoS ⭐ FOR LINUX : sudo apt-get update sudo apt-get install python3 sudp apt-get install python3-pip pip3 install colorama fakeuseragent pystyle 🧨 RUN TOOL : python3 main.py ⭐ FOR WINDOWS : Download & Install Python3 :...

vulnerable-PDF

vulnerable-PDF = Salaries.pdf - develоpe mode: 08.10.2022 NOTE: This is only for testing and you can open just a calculator, the integrated program of Microsoft. = Or you can use the PDF file to download the calc.exe into a forbidden directory :D WARNING! Only for tests and education =...

Chrome-Skia-CVE-2024-8636

Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop10.html Steps to reproduce: 1. Apply the chromium.diff patch to chromium. 2. Run genskpic.py to generate drawablepicture.skp.hh, then move the generated file to src/gpu/commandbuffer/client. 3...

AirDroidPwner

AirDroidPwner CVE-2019-9599 This exploit is no longer functional Proof of Concept Video: https://www.youtube.com/watch?v=0QDM2246DM CVE: https://nvd.nist.gov/vuln/detail/CVE-2019-9599 Exploit-db: https://www.exploit-db.com/exploits/46337 What is AirDroid? AirDroid is one of the best known and mos...

wifi-deauth

A DoS attack that disconnects all devices from a target wifi network. The network's password is not required Tested on Kali NetHunter Snapshot at the bottom IMPORTANT In some occasions, network APs might operate on both 5GHz and 2.4GHz under the same BSSID/SSID name. In order to truly bring the A...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name. External reference at https://marc.info/?l=bugtraq&m=101174569103289&w=2 Author Alex Hernandez aka @alt3kx...

CVE-2017-4490-

CVE-2017-4490 I've done some experiments I have succeeded in Exploit file .basgrc Specialist on Writing and decorating on Terminal I have created Weakness in file .bashrc And succeeded in Impede Terminal The weakness exists with me Works on all systems Linux Because figlet Works on all systems Ju...

Winrar-CVE-2023-40477-POC

CVE-2023-4047 PoC By Wild Pointer Read Research: https://wildptr.io/winrar-cve-2023-40477-poc-new-vulnerability-winrar-security-research/ Recvol3.cpp Vulnerability: https://www.rarlab.com/vulnrev3names.html, https://www.win-rar.com/ Vulnerable: WinRAR = 6.22 How to Test? You can generate your own...

POC-CVE-2025-48988-CVE-2025-48976

CVE-2025-48988 & CVE-2025-48976 About This project runs a simple file upload endpoint with Tomcat 10.1.41 and a Jakarta Servlet. The exploit runs, by default, 1000 parallelized multipart requests with 1000 parts and 50 headers by part, from 50 workers. Run POC Build and run the Docker container:...

CVE-2026-38763

CVE-2026-38763 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service in the kernel...

http2-bomb-analysis-paper

HTTP/2 Bomb: HPACK Indexed-Reference Amplification Chain Attack A high school student's independent technical deep-dive June 2026 TL;DR This repository contains my complete analysis of the HTTP/2 Bomb vulnerability CVE-2026-49975 / CVE-2026-47774, which chains two decades-old HTTP/2 primitives:...