CVE-2021-4034

CVE-2021-4034 sudo apt install golang-go sudo apt install gccgo-go grep PRETTY /etc/os-release id gcc cve-2021-4034-poc.c -o cve-2021-4034-poc ./cve-2021-4034-poc...

PoC_CVEs

PoC CVEs — Proof-of-Concept Repository Index A continuously updated index of public GitHub proof-of-concept repositories mapped to CVE identifiers. Strictly for educational and defensive security research purposes. Live Search Interface labs.jamessawyer.co.uk/cves/ A searchable web interface over...

extract75-cve-2020-13995

Control Flow Hijack Exploit for CVE-2020-13995 Build it: make Run it: make run Mayhem it: docker tag extract75-cve-2020-13955 /extract75-cve-2020-13955 docker push /extract75-cve-2020-13955 mayhem run --image /extract75-cve-2020-13955 \ --project /extract75 . Default runtime is 600 seconds;...

CVE-2020-16898

This is an educational exercise. Use at your own risk. CVE-2020-16898 Exploit Windows Binary PoC ./CVE-2020-16898.exe -t -u will run the exploit. ./CVE-2020-16898.exe -t 10.10.10.1 -u Administrator See my other exploits here This is a lesson as to why you should not trust binaries on the internet...

PPLmedic

PPLmedic This tool implements a Userland exploit chain for injecting arbitrary code into a PPL with the signer type Windows and elevating to the signer type WinTcb. These techniques were originally discussed by James Forshaw a.k.a. @tiraniddo in his blog post Injecting Code into Windows Protected...

CrushFTP VFS - Sandbox Escape LFR

VFS Sandbox Escape in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows remote attackers with low privileges to read files from the filesystem outside of VFS Sandbox. id: CVE-2024-4040 info: name: CrushFTP VFS - Sandbox Escape LFR author: DhiyaneshDK,pussycat0x severity:...

Confluence - Remote Code Execution

Confluence Server and Data Center is susceptible to an unauthenticated remote code execution vulnerability. id: CVE-2022-26134 info: name: Confluence - Remote Code Execution author: pdteam,jbertman severity: critical description: | Confluence Server and Data Center is susceptible to an...

Citrix - Local File Inclusion

Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 are vulnerable to local file inclusion because they allow unauthenticated access to certain URL endpoints. id:...

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

Oracle WebLogic Server Administration Console - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services versions 0.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0 contain an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. id:...

Exploit for Race Condition in Sonicwall Sma_6200_Firmware

ssh22-regresshion-rep...

Exploit for CVE-2026-1277

CVE-2026-1277 Proof of Concept / Exploit archive per CVE-20...

Exploit for CVE-2026-102785

CVE-2026-102785 Proof of Concept / Exploit archive per CVE-...

Exploit for CVE-2026-101767

CVE-2026-101767 Proof of Concept / Exploit archive per CVE-...

Exploit for CVE-2026-114509

CVE-2026-114509 Proof of Concept / Exploit archive per CVE-...

byovd-exploit-framework

Getting started Install required binaries git clone http...

Exploit for CVE-2026-8467

CVE-2026-8467 Proof of Concept / Exploit archive per CVE-20...

Exploit for CVE-2026-96760

CVE-2026-96760 Proof of Concept / Exploit archive per CVE-2...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

CVE-2020-1034

CVE-2020-1034 Warning This repository contains a working exploit. Publication was made for educational purposes only. Owner of this repository is not responsible for any damage done by any part of source code published here. This repository was created as a homework for "Protected Information...