CVE-2018-14667

CVE-2018-14667 After spending many time to understand and correctly exploit this CVE, I decided to build a repo on the RichFaces 3.X RCE bug and share the HOWTOs step by step with the community. 0x00 : Introduction on RichFaces 3.X bug On Monday, November 19, Joao F M Figueiredo published a well...

CVE-2020-2551

CVE-2020-2551 Weblogic IIOP Deserialization Test Environment Weblogic10.3.6+jdk1.6 Packaged jar file Extraction code: a6ob Exploit Download the jar package, then use marshalsec to start a malicious RMI service, compile a local exp.java package payload; import java.io.IOException; public class exp...

FreePBX-CVE-2025-57819-RCE

FreePBX 16 — Unauthenticated SQLi to RCE Proof-of-concept exploit chaining two FreePBX vulnerabilities to go from zero access to remote code execution on FreePBX 16. CVE| Component| Impact ---|---|--- CVE-2025-57819| Endpoint module loader brand parameter| Unauthenticated stacked SQL injection...

Freeze

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Freeze or to submit an issue, reference https://github.com/Tylous/Freeze. Freeze More Information If you want to learn more about the techniques utilized in this framework, please take a look at SourceZero Blog Description Freeze is ...

bluekeep

CVE-2019-0708 aka Bluekeep Scanner A simple scanner to determine system vulnerability to CVE-2019-0708. This is a Python port of the original metasploit module scanner by JaGoTu and zerosum0x0, available on Github here. Proof of Concept Proof of concept RCE via exploitation of the Bluekeep...

idasec

idasec IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform Disclaimer IDAsec is prototype tool under development, some features are likely buggy and should be used with care. Features Decoding an instruction in DBA IR Loading execution traces generated by Pinsec...

tgt-monitor-bof

Kerberos TGT Monitoring & Auto-Renewal This repository contains two Async Beacon Object Files BOF. The first, tgt-monitor, monitors the system for Kerberos logon events and wakes up the agent whenever a new Kerberos TGT is captured. Similar to Rubeus' monitor command, this BOF is running...

CVE-2024-46538

This post is a research article published by EQSTLab. Thanks tophysicszq, who discovered this vulnerability. CVE-2024-46538 ★ CVE-2024-46538 PfSense Stored XSS lead to Arbitrary Code Execution PoC ★ https://github.com/user-attachments/assets/f41d0945-b7f4-4f88-bac5-265904256aae Description...

CVE-2019-12185

CVE-2019-12185 eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a user account to fully compromise the system using a POST request. This will allow for PHP files to be...

sigmalite

github.com/runreveal/sigmalite Package sigmalite provides a parser and an execution engine for the Sigma detection format. rule, err := sigmalite.ParseRulebyte title: My example rule detection: keywords: - foo - bar selection: EventId: 1234 condition: keywords and selection if err != nil return e...

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server This vulnerability could allow an attacker to take complete control of a vulnerable Confluence server. This could allow the attacker to steal data, modify data, or disrupt the availability of the server. Poc Create a JavaScript file and giv...

CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution RCE through a buffer overflow exploit. This vulnerability enables attackers to upload malicious files e.g., web shells and execute commands on the target system...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

CVE-2026-39047

CVE-2026-39047: Epson Printer RAW Protocol Exploit Framework Repository: https://github.com/J4ck3LSyN-Gen2/CVE-2026-39047 PoC Script: poc.py Mock Target: mockprinter.py Author: J4ck3LSyN Overview This framework demonstrates the CVE-2026-39047 vulnerability - a remote buffer overflow in Epson...

TrueConf Server Code Execution

The vulnerability of the TrueConf Server software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

ReadyScript SQL Injection

The vulnerability of the ReadyScript e-commerce management system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

vvdecapp reconstructCoeff Memory Use After Free

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

vvdecapp reconstructCoeff Memory Use After Free

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

vvdecapp reconstructCoeff Memory Use After Free

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

cve-2026-42945

CVE-2026-42945 — NGINX Rewrite Heap Overrun: Analysis, DoS & Credited RCE Port Security research on CVE-2026-42945 CVSS 4.0 9.2 CRITICAL: a heap buffer overrun in NGINX's script engine where a rewrite with arguments in the replacement e.g. rewrite ^. /new?c=1; leaves the engine's isargs flag set...