CVE-2023-4220_Chamilo_RCE

CVE-2023-4220 Python exploit for Chamilo Unrestricted File Upload Vuln - CVE-2023-4220 The code contained within the repository is meant for educational purposes only. Description: Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in...

CVE-2024-55591-POC

--port 443 --ssl Then use the prompt: root@kitploit: FortiOS get system status FortiOS exit...

CVE-2024-6769

Blogpost: CVE-2024-6769 Poisoning the activation cache to elevate from medium to high integrity This blog is about two chained bugs: Stage one is a DLL Hijacking bug caused by the remapping of ROOT drive and stage two is an Activation Cache Poisoning bug managed by the CSRSS server. The first sta...

SpookySSL-Scanner

SpookySSL-Scanner SpookySSL CVE-2022-3602 SSLv3 Scanner for Windows, Linux, macOS Turkish Zafiyet Nasıl Oluşuyor? Öncelikle sorun byte boyutunu belirlerken ortaya çıkıyor. Bayt boyutunu belirlerken farkındaysanız NULL yani boş/sıfır değer tanımlanmamış yani bayt uzunluğu sıfır olarak...

CVE-2025-49113

CVE-2025-49113 RCE exploit the method for username/password authentication in this Exploit comes in 4 steps the code is a bit messy...

CVE-2023-6702

Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace CVE-2023-6702 Summary This vulnerability allowed a remote attacker to execute arbitrary code inside the Chrome renderer process. There was an insufficient type check in the async stack trace handling code. It leads to a type confusi...

proxmark3-amiimicyou

Amiibo simulator instructions A copy of the amiitool Lua wrapper is included at client/libluamiibo.so, but if you want to build it yourself, follow these instructions: 1. Get the lua-lib branch of amiitool at https://github.com/jamchamb/amiitool/tree/lua-lib. 2. In CMakeLists.txt set PROXMARKLIBL...

NodeGoat

NodeGoat Being lightweight, fast, and scalable, Node.js is becoming a widely adopted platform for developing web applications. This project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them. Getti...

poc-cve-2016-10555

Change the algorithm RS256asymmetric to HS256symmetric - POC CVE-2016-10555 The algorithm HS256 uses the secret key to sign and verify each message. The algorithm RS256 uses the private key to sign the message and uses the public key for authentication. If you change the algorithm from RS256 to...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

ShinoBOT

ShinoBOT Suite This repository is designated just for the binary, not for the source code. For the detail go to http://shinobot.com http://shinosec.com/shinobotsuite/ To download a file... Latest Version The latest ShinoBOT is generated by the web server dynamically. Go to...

gitlab-watchman

GitLab Watchman About GitLab Watchman GitLab Watchman is an application that uses the GitLab API to detect exposed secrets and personal data. It also enumerates the GitLab instance for any useful information. Features Secrets Detection It searches GitLab for internally shared projects and looks a...

CVE-2024-23346

CVE-2024-23346 This PoC is based on the report/findings of William Khem-Marquez and Matthew Horton: https://github.com/materialsproject/pymatgen/security/advisories/GHSA-vgv8-5cpj-qj2f Usage: python3 CVE-2024-23346.py -t targetURL -u username -p password -l localhost -P localport -X -P and -X are...

weblogic_wls_wsat_rce

weblogicwlswsatrce Weblogic wls-wsat component deserialization vulnerability CVE-2017-10271 exploit script, modified fromhttps://github.com/s3xy/CVE-2017-10271. Command execution with output Directly upload shell Tested OK on Linux Weblogic 10.3.6.0 Usage and Parameters python weblogicwlswsatexp....

CVE-2025-29927-PoC-Exploit

CVE-2025-29927-PoC-Exploit Proof-of-Concept for Authorization Bypass in Next.js Middleware You can run this against a vulnerable version here: https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927 Running Execution is straightforward. 1. Python3 CVE-2025-29927-PoC-Exploit.py It will...

CVE-2025-21293

CVE-2025-21293 CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. It allows "Network Configuration Operators" to execute code with SYSTEM privileges via Windows Performance Counters. Affected Windows versions include Windows 10, 11, and Server. Microsof...

elfloader

Summary elfloader is a super simple loader for ELF files that generates a flat in-memory representation of the ELF. Pair this with Rust and now you can write your shellcode in a proper, safe, high-level language. Any target that LLVM can target can be used, including custom target specifications...

BugChecker

BugChecker Introduction BugChecker is a SoftICE-like kernel and user debugger for Windows 11 and Windows XP as well: it supports Windows versions from XP to 11, both x86 and x64. BugChecker doesn't require a second machine to be connected to the system being debugged, like in the case of WinDbg a...

CVE-2026-19729 Keycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parameters

A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs because a previous fix for path probing was incomplete, allowing a realm administrator to still submit arbitrary filesystem paths as keysto...

CVE-2026-19729 Keycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parameters

A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs because a previous fix for path probing was incomplete, allowing a realm administrator to still submit arbitrary filesystem paths as keysto...