280485 matches found
Exploit for Out-of-bounds Write in Apple Ipados
CVE-2026-20698 — XNU Kernel Heap Overflow via PFROUTE RTAGEN...
binary-exploitation-writeups
Binary Exploitation Writeups A collection of pwn challenges c...
Exploit for Embedded Malicious Code in Aquasec Setup-Trivy
CVE-2026-33634-Scanner !License: MIThttps://img.shields.i...
Exploit for Command Injection in Paloaltonetworks Pan-Os
CVE KB: A high-quality knowledge base for automatic penetratio...
Exploit for Improper Enforcement of Message Integrity During Transmission in a Communication Channel in Freeradius
RADIUS / FreeRADIUS Security Analysis & PoC Systematic securi...
kexploitbinary
DarkSword Red Team Framework Framework Python com CLI para en...
Exploit for Deserialization of Untrusted Data in Facebook React
No d...
Exploit for Improper Access Control in Apache Hugegraph
CVE-2024-27348: Apache HugeGraph RCE Advanced Sandbox Bypass...
Zero-Trust-Browser-PoC-Pages
Zero-Trus...
tudo-exploits-oswe-prep
tudo-exploits-oswe-prep A project contains all exploits of vul...
Exploit for Code Injection in Apache Commons_Text
ICT287-CVE-202...
RegPwnBOF
🛡️ RegPwnBOF - Simple Registry Action Tool !Download RegPwn...
test-xss
test-xss "test." Install bash np...
📄 Bludit CMS Shell Upload
Bludit CMS versions prior to 3.18.4 have an unrestricted API file upload vulnerability that allows for remote code execution. Exploit Title: Bludit CMS . The uploadFile function performs no file extension or content validation, allowing upload of PHP webshells that execute as www-data. The API...
📄 LuaJIT 2.1.1774638290 Arbitrary Code Execution
LuaJIT's Foreign Function Interface FFI provides unrestricted access to native C functions including syscall, mmap, mprotect and arbitrary shared library loading. When FFI is accessible to untrusted Lua code in embedding scenarios OpenResty, Redis, game engines, IoT, an attacker can achieve...
📄 Forcepoint One Endpoint macOS 25.08.5008 DLP Bypass
Forcepoint One Endpoint DLP Endpoint for macOS version 25.08.5008 with DLP Policy Engine version 10.2.0.298 allows a local standard non-admin user to bypass DLP content inspection and policy enforcement by sending SIGSTOP to user-owned browser helper processes Websense Endpoint Helper,...