232339 matches found
CVE-2018-8639-exp
CVE-2018-8639-exp platform: windows 2008 and windows 2008 R2...
SambaHunter
SambaHunter It is a simple script to exploit RCE for Samba CVE-2017-7494. Now works with Python3. Many of the required Python2 libraries are deprecated e.g. commands Added logging to show which shares are writeable. If 'Exploit Finished' appears but no shares are writeable, the exploit didn't wor...
exploit-CVE-2022-36779
authenticated Command Injection for CVE-2022-36779 enjoy :...
cve-2026-9198_exploit
CVE-2026-9198 — Langflow OSS Unauthenticated RCE Unauthenticated remote code execution in IBM Langflow OSS 1.0.0 – 1.10.0 on a default deployment. Chains two flaws: CVE-2026-9103 — GET /api/v1/autologin mints a SUPERUSER JWT to any caller with no credentials whenever AUTOLOGIN is enabled the...
cve-2015-1592
These files were discussed in my Houston Perl Mongers talk about "Weaponizing Perl Serialization Flaws With MetaSploit". The video of the talk that explains these files is available here: https://youtu.be/Gzx6KlqiIZE The storable-.pl files are used to generate the 'config' parameter values used i...
cve-2014-7920-7921
cve-2014-7920-7921 Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1 The symbols in this exploit are for Android 4.3, for can be adapted to any version up to Android 5.1...
CVE-2025-48595-Exploit
This repository does not have a README...
CVE-2022-46164-poc
CVE-2022-46164-poc Basic POC exploit for CVE-2022-46164...
CVE-2016-5195
CVE-2016-5195 CVE-2016-5195 dirty cow/dirtycow/dirtyc0w proof of concept for Android This repository demonstrates the vulnerability on vulnerable Android devices attached via ADB. It does not disable SELinux see https://github.com/timwr/CVE-2016-5195/issues/9 or install superuser on the device. $...
CVE-2020-1472-EXP
Ladon Moudle CVE-2020-1472 Exploit Usage: http://k8gege.org/Ladon/cve-2020-1472.html...
RootMyVivo
RootMyVivo Root for vivo and iQOO phones with a locked bootloader. No unlocking, no flashing — install the APK, press the button, wait. Built on GhostLock CVE-2026-43499, a use-after-free in futex PI plus KernelSU installed on top of the temporary root. Русский · 中文 How it goes 1. Install the APK...
CVE-2023-38831
CVE-2023-38831 winrar exploit 6.22 = Quick poc git clone https://github.com/nhman-python/CVE-2023-38831.git cd cd CVE-2023-38831 python3 poc.py poc example usage python3 simplefile.txt script.bat output.zip example usage https://www.youtube.com/watch?v=-mN4tTKaMhQ...
GhostLock
GhostLock 5.10 This is a kernel root exploit for the Amazon Fire Max 11 sunstone and the Fire TV Stick 4K Max 2nd Gen / 2023 karat, adapted from CVE-2026-43499 in CyberMeowfia. Supported devices Two devices are supported, both on Fire OS 8. Each has its own build target. Fire Max 11 sunstone Fire...
OffensiveCpp
OffensiveCpp Offensive C++ is a collection of offensive security snippets written in C++. It includes various tools for penetration testing and exploit development. Table of Contents OffensiveCpp Introduction Why C/C++? Compiling Reference Libraries Contributing License Introduction The purpose o...
CVE-2021-43008-AdminerRead
CVE-2021-43008 - AdminerRead Exploit tool for Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability Installation git clone https://github.com/p0dalirius/AdminerRead cd AdminerRead sudo python3 setup.py install Usage Vulnerable versions Adminer version 1.0 up to version 4.6.2 included File Rea...
CVE-2022-0337-RePoC
This repository does not have a README...
CVE-2024-26230
CVE-2024-26230 All credit goes to k0shl @KeyZ3r0! Summary of Exploit A trick, the story of CVE-2024-26230 DISCLAIMER The exploit is not stable, only use it for study purposes...
CVE-2016-4669
CVE-2016-4669 Imperfect exploit code, for learning purposes only : 1 Compilation method Just run make 2 Function If successful, it can obtain root privileges. But the success rate is not high. 3 General overview Relatively stable creation of a dangling port. Cannot stably reuse the port with root...
RIPPL
RIPPL Manipulating PPL protected processes without using a driver This tool implements a userland exploit to manipulate Windows PPL protected processes. The technique was initially discussed by James Forshaw a.k.a. @tiraniddo and Clément Labro a.k.a. @itm4n in the following blogposts. Blog post...