Exploit for Classic Buffer Overflow in Freefloat Freefloat_Ftp_Server

CVE 2025-5548 Este es el repositorio principal donde document...

CVE-2026-32304

Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to 3.0.14, the createfunctionargs, code function passes both parameters directly to the Function constructor without any sanitization, allowing arbitrary code execution. This is distinct from...

Exploit for Deserialization of Untrusted Data in Nextgen Mirth_Connect

Mirth Connect PoC Script Simple Python script for security re...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 — "Baron Samedit" Lab & Exploit This repository...

Metasploit-Project

MSF Cloud — Security Exploitation & Education Platform SSEP...

Exploit for CVE-2026-1492

CVE-2026-1492 CVE-2026-1492 poc -...

CVE-2026-29091 Locutus: Remote Code Execution (RCE) in locutus call_user_func_array due to Code Injection

Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to version 3.0.0, a remote code execution RCE flaw was discovered in the locutus project, specifically within the calluserfuncarray function implementation. The vulnerability allows an attacker to...

Exploit for Deserialization of Untrusted Data in Facebook React

React-2025 CTF Lab: CVE-2025-55182 Overview This repositor...

Exploit for CVE-2026-23550

CVE-2026-23550 Dedsec WordPress Exploitation Author:...

MightyBots

🦠 MightyBots An Educational Post-Exploitation Framework fo...

Exploit for CVE-2018-19320

KernelMode - Advanced Windows Kernel Exploitation Toolkit...

Exploit for Deserialization of Untrusted Data in Facebook React

This Proof of Concept PoC for React2Shell CVE-2025-55182 vul...

CVE-2026-25875

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The admin authorization middleware trusts client-controlled JWT claims role and scope without enforcing server-side role verification...

CVE-2026-25812

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application enables credentialed CORS requests but does not implement any CSRF protection mechanism...

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 Este repositorio contiene un generador de archiv...

Exploit for OS Command Injection in Cyberpanel

CVE-2024-51378 — Proof of Concept эмуляция ДЗ 10. Python...

Exploit for OS Command Injection in Cyberpanel

PoC: CVE-2024-51378 Command Injection, эмуляция 📌 Описан...

CVE-2026-25814

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, User-controlled query parameters are passed directly into DynamoDB query/filter construction without validation or sanitization...

CVE-2026-25813

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The application logs highly sensitive data directly to console output without masking or redaction...

CVE-2026-25812

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application enables credentialed CORS requests but does not implement any CSRF protection mechanism...