CVE-2023-3079

Exploit for CVE-2023-3079 Shoutout to @clem1 for finding the ITW exploit. Shoutout to @alisaesage for her prior RCA on the bug. Shoutout to @buptsb for his notes on the bug. Resources Writeups and other resources. https://issues.chromium.org/issues/40065138...

CVE-2024-45216-Poc

CVE-2024-45216-Poc python CVE-2024-45216poc.py --host http://122.51.176.242:8983...

CVE-2022-32250

CVE-2022-32250 This is my exploit for CVE-2022-32250, written entirely based on the research from NCC Group's blog. Tested on: Kernel version 5.13 Success rate: 70% Building Building requires libmnl and libnftnl. make all Disclaimer The Proof-of-Concept and the write-up of the vulnerability are f...

CVE-2026-26335-Calero-VeraSMART-RCE

👤 Author Mohammed Idrees Banyamer Security Researcher GitHub: https://github.com/mbanyamer Instagram: https://instagram.com/banyamersecurity CVE-2026-26335 - Calero VeraSMART ViewState RCE Exploit 📌 Description CVE‑2026‑26335 is a critical unauthenticated remote code execution vulnerability in...

SCOPE

SCOPE: Security Cloud Ops Purple Engagement SCOPE runs AWS purple-team workflows with deterministic Python inventory and bounded AI agents. It audits AWS resources, validates attack paths, generates review-only exploit playbooks, produces controls, and guides Splunk investigations. How It Works R...

Crashcast-Exploit

CRASHCAST MASS-EXPLOIT TOOL Author: @037 This tool allows you to mass play any YouTube video, remotely terminate apps, and rename Chromecast devices obtained from Shodan.io Prerequisites The only thing you need installed is Python 3.x sudo apt-get install python3 You also require to have cURL...

glass-cage-i18-2025-24085-and-cve-2025-24201

Original Fork Network Left Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE-2025-24201 – WebKit Remote Code Execution CVE-2025-24085 – Core Media Privilege Escalation Reported to Apple: January 9, 2025 Patched: February–March 2025 Tested On: iPhone 14 Pro Max iOS 18.2.1 CVSS Base Score...

CVE-2020-27955

CVE-2020-27955 Thanks https://medium.com/bugbountywriteup/git-lfs-exploit-for-remote-code-execution-cve-2020-27955-e8f4786163c3...

DirtyCow

DirtyCow - Exploit Below code takes advantage of a known vulnerability Dirty COW CVE-2016-5195 to escalate privileges and get root access. Before running, uncomment sc for your platform within main.c. Compilation: gcc main.c -o dirtycow -lpthread...

dirtyfrag

Dirty Frag: Universal Linux LPE Abstract This document describes the Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim @v4bel, which can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write CVE-2026-43284 vulnerability and the...

CVE-2015-8660

CVE-2015-8660 This code contains the exploit code for CVE-2015-8660, along with comments, the source code with the vulnerability, and the patched code. For specific code explanations, please see my blog http://blog.csdn.net/enjoy5512/article/details/51155798...

cve-2023-25194

Apache Druid CVE-2023-25194 CVE-2023-25194 is a deserialization vulnerability affecting Apache Kafka. This go-exploit demonstrates exploiting CVE-2023-25194 against Apache Druid using Kafka. This type of attack typically requires an LDAP JNDI attacker infrastructure that is normally spread across...

CVE-2023-28121

CVE-2023-28121 WooCommerce Payments: Unauthorized Admin Access Exploit Won't be publishing this one first... thats for sure.. PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

CVE-2024-0044-EXP

CVE-2024-0044-EXP Exploit CVE-2024-0044 on Android 12, 13 before the March 2024 security update for data backup Usage ./CVE-2024-0044-EXP.sh Sample ./CVE-2024-0044-EXP.sh com.tencent.mm Description Vulnerability discovery https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.ht...

ghostlock-myron-tw

GhostLock for POCO F8 Ultra / REDMI K90 Pro Max — Global & Taiwan Variant myron, WPMTWXM GhostLock CVE-2026-43499 kernel exploit port for the global/Taiwan firmware of the POCO F8 Ultra / REDMI K90 Pro Max codename myron, Snapdragon 8 Elite Gen 5 / SM8850. Target : HyperOS OS3.0.6.0.WPMTWXM —...

SSTI-Exploit-Detector

SSTI-Exploit-Detector SSTI Exploit Detector is a tool designed to detect potential Server-Side Template Injection SSTI vulnerabilities in web applications. SSTI-Exploit-Detector Jenderal92 Features Custom Payload File : Allows users to add their own payloads to test various template engines...

CVE-2021-3156

CVE-2021-3156 Exploit for CVE-2021-3156...

overkill

Overkill Overkill is an exploit for a patched vulnerability affecting QNAP QTS. Due to the way QNAP discloses vulnerabilities, I'm unsure if this issue has a CVE or not. However, it was likely patched in November 2020 and April 2021. The n-day was "discovered" while doing diff analysis for...

CVE-2017-8759

Exploit toolkit for CVE-2017-8759 Do not be an asshole Simple tool written in C to handle the RCE vulnerability in .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7. aka ".NET Framework Remote Code Execution Vulnerability." Help C:\Users\Jonas Uliana\toolsCVE-2017-8759.exe /h INFO ...

apache-struts2-CVE-2017-5638

apache-struts2-CVE-2017-5638 Demo Application and Exploit Sample Apache Struts2 App Struts2-showcase: https://mvnrepository.com/artifact/org.apache.struts/struts2-showcase/2.3.12 Exploit Reference: https://github.com/rapid7/metasploit-framework/issues/8064...