MAL-008

MAL-008: SSHtranger Things CVE-2019-6111, CVE-2019-6110 in Cisco SD-WAN Cisco SD-WAN v20.4.2.1 uses an old version of SSH OpenSSH7.6p1 that is susceptible to the “SSHtranger Things” attack. If a victim tries to connect to a malicious/compromised SSH server this attack may be used to write/overwri...

CVE-2022-21587-POC

CVE-2022-21587-POC- CVE-2022-21587 POC file exploit.py will overwrite to file .pl not recommended for use, will affect the system file EBS not overwrite, will create a new shell file install slipit: git clone https://github.com/usdAG/slipit cd slipit python3 setup.py sdist pip3 install --user dis...

CVE-2026-14361

CVE-2026-14361 Consul Template's writeToFile helper opened an operator-supplied destination directly and followed linked path components, allowing rendered output to escape the intended directory and overwrite a preexisting file. Intro I found this issue while reviewing HashiCorp Consul Template ...

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload POC of DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite I'm a simple man, I see cvss:10/10 I go in xD I saw this new CVE CVE-2025-64095 DNN Insufficient Access Control - Image Upload allows for Site Content...

deepin-linux_reader_RCE-exploit

CVE-2023-50254 - Deepin Linux's default document viewer deepin-reader RCE CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that...

Cve-2025-8088-WinRar-vulnerability

Cve-2025-8088 WinRAR Python tool that creates a malicious RAR file to exploit the CVE-2025-8088 vulnerability in WinRAR. The CVE-2025-8088 vulnerability allows exploitation of manipulated RAR files to cause path traversal and overwrite arbitrary files on the victim's system. This project is for...

CVE-2019-5736

Usage Edit HOST inside payload.c, compile with make. Start nc and run pwn.sh inside the container. Notes This exploit is destructive: it'll overwrite /usr/bin/docker-runc binary on the host with the payload. It'll also overwrite /bin/sh inside the container. Tested only on Debian 9. No attempts...

CVE-2020-10665

CVE-2020-10665 Docker Desktop Local Privilege Escalation POC for Docker Desktop Local Privilege Escalation. Built based on the writeup at https://www.activecyber.us/activelabs/docker-desktop-local-privilege-escalation-cve-2020-10665. Hardlink creation adapted from...

shakeitoff

shakeitoff A smaller, minimized, and cleaner version of InstallerFileTakeOver aka the zero-day exploit that is a "variation" of CVE-2021-41379 later assigned CVE-2021-43883. This version does not pop a shell like InstallerFileTakeOver. The point of this code was to create a simpler proof of conce...

dirtypipez-exploit

CVE-2022-0847 DirtyPipe Exploit. Credit: Max Kellermann [email protected] A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe'...

CVE-2007-4559

PoC or Exploit for CVE-2007-4559 A malicious TAR archive can include file paths like ../../../../etc/passwd, which try to "climb up" out of the intended extraction folder. If a Python script uses tarfile.extract or extractall without checking the file paths, it will unpack files to those location...

CVE-2024-42471-PoC

CVE-2024-42471-PoC tar-fs file write/overwrite vulnerability...

CVE-2020-11108-PoC

CVE-2020-11108-PoC Two PoCs are in this repo. cve-2020-11108-rce.py will give you a shell as the www-data user. root-cve-2020-11108-rce.py will give you a shell and escalate privileges to root. Note: This is destructive as we must overwrite teleporter.php. For a full explanation/writeup please se...

CVE-2024-37726-MSI-Center-Local-Privilege-Escalation

CVE-2024-37726 MSI Center Local Privilege Escalation - Arbitrary File Overwrite Vulnerability Vulnerability Summary A local privilege escalation vulnerability on Windows OS has been identified in MSI Center versions = 2.0.36.0, which allows a low-privileged user to arbitrarily overwrite or delete...

sploits

sploits | Code| Description ---|---|--- CVE-2018-4310| code| MediaRemote: An access issue was addressed with additional sandbox restrictions CVE-2018-4991| code| Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation...

CVE-2025-24203-iOS-Exploit-With-Error-Logging

CVE-2025-24203 Exploit iOS 16.0 – 18.3.2 Thhe CVE-2025-24203 C exploit, targeting iOS versions 16.0 through 18.3.2 on all devices. Exploit by Ian Beer, I just added better error logging and graceful failing : Originally discovered by Ian Beer of Google Project Zero , I slightly improved its error...

CVE-2016-5195

CVE-2016-5195 my personal POC and EXPLOIT of CVE-2016-5195 dirty COW Usage POC: write files arbitrarily Just a simply POC of this CVE, compile the file poc.c as follow: $ gcc poc.c -o poc -static -lpthread You shall run it as follow: ./poc destinationfile fakefile You shall make sure the...

CVE-2024-12905-PoC

CVE-2024-12905 tar-fs file write/overwrite vulnerability...

CVE-2024-12252

SEO LAT Auto Post = 2.2.1 - Remote Code Execution Description The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remoteupdate AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated...

CVE-2025-64095

=== Description === DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files. An unauthenticated user can upload and repla...