2987857 matches found
external_expat_AOSP10_r33_CVE-2022-22822toCVE-2022-22827
Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...
SonicWall-SMA1000-Zero-Day-IoC-Check
SonicWall SMA1000 Zero-Day IoC Check An unofficial Bash-based log check for selected indicators of compromise associated with the actively exploited SonicWall SMA 1000 Series vulnerabilities CVE-2026-15409 and CVE-2026-15410. !CAUTION Independent community project: This repository is not affiliat...
CVE-2026-46333
CVE-2026-46333 Research and educational repository for CVE-2026-46333 , focused on reproducible analysis and a safe test PoC workflow. 1 CVE-2026-46333 This project documents the vulnerability behavior, test setup, and validation approach so researchers and defenders can reproduce findings...
Log4Shell-CVE-2021-44228-Demo
Log4ShellCVE-2021-44228 Demo Environment Setup Client Anywhere that with ability to access the HTTP Server with curl command line Vulnerable App by Http Server with log4j Amazon Linux 2 x86 based EC2 Instance / CentOS Azure Virtual Machine $ yum install docker -y $ systemctl enable docker $...
CVE-2026-46529
RCE via PDF argv injection CVE-2026-46529 atril/xreader/evince Working proof-of-concept for the argv injection in evspawn shell/ev-application.c. A single click anywhere on the rendered page of a crafted PDF triggers arbitrary code execution as the user running the viewer. This release uses the...
CVE-2023-45878
Gibbon CMS CVE-2023-45878 Exploit This Python script exploits CVE-2023-45878, an unauthenticated arbitrary file upload vulnerability in Gibbon CMS versions 25.0.1 and before, leading to Remote Code Execution RCE. Vulnerability Description CVE-2023-45878 exists in the rubricsvisualisesaveAjax.php...
CVE-2022-22965-PoC_Payara
CVE-2022-22965 PoC - Payara Arbitrary File Download Minimal example of how to reproduce CVE-2022-22965 Spring vulnerability in Payara/Glassfish. Alternative payload for Payara/Glassfish that allows the malicious user to set an arbitrary web root, leading to arbitrary file download. Run using dock...
Xstream_cve-2022-41966
Xstreamcve-2022-41966 cve-2022-41966 debug code...
CVE-2021-4034
Exploit for CVE-2021-4034 Pkexec - Local Privilege Escalation For educational and authorized security research purposes only. Original Exploit Authors @arthepsy Vulnerability Description A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a...
CVE-2024-37054-PoC
Description Proof of concept for CVE-2024-37054, a critical deserialization vulnerability in MLflow versions 0.9.0 to 2.14.1. When a malicious pyfunc model is loaded via mlflow.pyfunc.loadmodel, the pickled payload executes arbitrary code. Files exploit.py — full exploit: register, train, upload,...
tvm-recover
tvm-recover Related Zenodo record: 10.5281/zenodo.23474767. ⚠️ Disclaimer: This project is intended strictly for authorized security research, interoperability analysis, and education. It does not include or provide any bypass functionality for commercial anti-cheat systems. Users are solely...
CorelightForSentinelOne
SentinelOne Dashboards for Singularity Operations Center Overview This guide will help you set up and utilize SentinelOne Dashboards, which offer powerful data insights for monitoring and analyzing your network traffic. Whether you're a security analyst, network administrator, or IT professional,...
CVE-2022-4140
CVE-2022-4140 - WordPress plugin Welcart e-Commerce 2.8.5 - Arbitrary File Read This repo contains a Proof of ConceptPoC exploit for CVE-2022-4140. Disclaimer This project is provided for educational purposes and authorized security testing only. Do not use it against systems that you do not own ...
CVE-2024-32136
BWL Advanced FAQ Manager 2.0.3 - Post-Authenticated SQL Injection Exploit Title: BWL Advanced FAQ Manager 2.0.3 - Post-Authenticated SQL Injection Date: 14 Apr 2024 Exploit Author: Ivan Spiridonov xbz0n Software Link: https://codecanyon.net/item/bwl-advanced-faq-manager/5007135 Version: 2.0.3...
CVE-2025-69212-PoC
CVE-2025-69212 OpenSTAManager = 2.9.8 — OS Command Injection in P7M File Processing Overview Field| Details ---|--- CVE ID| CVE-2025-69212 Severity| CRITICAL CVSS 4.0: 9.4 CWE| CWE-78: OS Command Injection Affected Versions| OpenSTAManager = 2.9.8 Vulnerable Function| XML::decodeP7M in...
CVE-2026-110687
Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16cmp. canonical sorts keys by UTF-16 code units. When any key in a hash is UTF-8 flagged, every key is decoded as UTF-8 for the comparison, including byte-string keys that the encod...
CVE-2026-109437
Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST...
security-research
Security Research Proof-of-concept code for disclosed Linux kernel vulnerabilities. CVE| Source| Writeup ---|---|--- CVE-2026-64564| pocubuntu.c| SCTPhantom CVE-2026-74580| poc.c| Vghost CVE-2026-80530| poc.c| TBD...
CVE-2022-0944
CVE-2022-0944 A proof of concept exploit for SQLPad RCE CVE-2022-0944 Usage usage: main.py -h url lhost lport username password positional arguments: url URL to SQLPad lhost Listener host address for reverse shell lport Listener port for reverse shell username login username optional password log...