278558 matches found
📄 Microsoft Windows Kernel ISO Mount / Oplock Deserialization Denial of Service
Proof of concept exploit for a logic-based denial of service vulnerability in Windows 11 25H2 Build 26200 that causes permanent kernel state corruption through ISO mounting, oplocks, and Windows Defender scanning...
📄 WordPress Contest Gallery 28.1.4 SQL Injection
WordPress Contest Gallery plugin version 28.1.4 unauthenticated blind SQL Injection exploit written in Python3. ================================================================================================================================== | Title : WordPress Contest Gallery 28.1.4...
📄 WordPress PickPlugins 2.0.46 OTP Bypass
WordPress PickPlugins plugin version 2.0.46 proof of concept user verification OTP authentication bypass exploit. ================================================================================================================================== | Title : WordPress PickPlugins 2.0.46 User...
📄 Genetec RabbitMQ Local Privilege Escalation
Genetec RabbitMQ local privilege escalation proof of concept exploit for Windows mimicking techniques used in token impersonation-based attacks such as Rotten Potato–style methods...
📄 WordPress OrderConvo 13.5 Path Traversal / File Read
This Metasploit module exploits a path traversal vulnerability in WordPress OrderConvo plugin versions prior to 14 for WooCommerce. The vulnerability exists in the download-file endpoint which fails to properly sanitize the filename parameter, allowing attackers to read arbitrary files from the...
📄 Microsoft Windows Defender MsMpEng.exe Race Condition / Privilege Escalation
A race condition exists between Windows Defender's MpCleanCallbackFunction cleanup routine and Volume Shadow Copy creation. This vulnerability allows an attacker to escalate privileges to NT AUTHORITY\SYSTEM. This Metasploit module demonstrates the issue...
📄 Grav CMS Zip Slip Remote Code Execution
This Metasploit module exploits a vulnerability in Grav CMS versions prior to 2.0.0-beta.2. The Direct Install feature in the Admin plugin allows administrators to upload plugins as ZIP files...
📄 CMS Academy Booking 1.0 SQL Injection
CMS Academy Booking version 1.0 suffers from a remote SQL injection vulnerability. ================================================================================================================================== | Title : CMS academy booking v1.0 sql injection vulnerability | | Author : indoush...
📄 Wing FTP Server 8.1.2 Authenticated Remote Code Execution
Wing FTP Server versions prior to 8.1.3 allows authenticated administrators to execute arbitrary Lua code on the server. ================================================================================================================================== | Title : Wing FTP Server 8.1.2 - Authenticat...
Exploit for Unrestricted Upload of File with Dangerous Type in Eclipse Business_Intelligence_And_Reporting_Tools
CVE-2021-34427 Windows POC for CVE-2021-34427 affec...
Exploit for CVE-2015-10141
C...
Exploit for Cross-site Scripting in Roundcube Webmail
CVE-2024-42009 — Roundcube Webmail 1.6.6 Stored XSS PoC F...
Exploit for Argument Injection in Gnu Inetutils
CVE-2026-24061 — Reproduction Lab ⚠️ For educational purp...
Exploit for Path Traversal in Microsoft
NimbusPwn — networkd-dispatcher...
Hadoop-YARN-RCE
Unauthenticated RCE in Apache Hadoop YARN ResourceManager An...
NTLM Relay to Self (HTTP to LDAP) - Post Exploitation
This module performs an NTLM relay-to-self privilege escalation attack. It starts an HTTP-to-LDAP relay server on the compromised host, then triggers the WebClient service via an ETW event allowing a low-privilege user to start it, and coerces the local machine account to authenticate via...
Exploit for OS Command Injection in Buffalo Open_Xdmod
CVE-2...
ExploitDev
Assembly Code Compilation & Shell Generation Follow the steps...