26973 matches found
CVE-2022-0185-Analysis-and-Exploit
CVE-2022-0185-Analysis-and-Exploit Research and proof-of-concept for CVE-2022-0185 Linux kernel heap overflow vulnerability. CVE-2022-0185 – Linux Kernel Heap Overflow Analysis Overview CVE-2022-0185 is a heap-based buffer overflow vulnerability in the Linux kernel’s filesystem context...
CVE-2025-55130
CVE-2025-55130 - Node.js Permission Model Symlink Escape / | | | | |/ \ / \ | | | | / | // \ | | || | || || || | | | | \ | \ \ | | | | | | |/|| \ ||| ||/||| | || | || | |/ |//||// Node.js Permission Model Bypass via Crafted Symlinks Discovered by natann @ JFrog Overview A path traversal flaw in...
CVE-2023-0386-go-poc
Go PoC of CVE-2023-0386 ./main /tmp/fuse Will run the program and create a fuse mount on "/tmp/fuse" directory. Expects you've compiled the shell in the root directory with a name of "shell" by default. After you've run the program, there should be an executable binary in the "/tmp/ovlmerged/"...
CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation
CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation This is just a quick note on how to exploit these vulnerabilities to get root. Start by utilizing this tool on the attacker machine: https://raw.githubusercontent.com/ibrahmsql/CVE-2025-6018/refs/heads/main/CVE-202 You should now have a shell a...
onecli
The agent harness built for teams. A pro assistant for companies. Give every employee a secured, sandboxed personal agent. Website · Docs · Discord Quick Start Cloud-hosted: onecli.sh Self-hosted git clone https://github.com/onecli/onecli.git && cd onecli pnpm install pnpm run setup Open...
CVE-2023-0386-OverlayFS
CVE-2023-0386 - OverlayFS / FUSE Original CVE source written by xkaneiki: https://github.com/xkaneiki/CVE-2023-0386/tree/main Rewritten so the exploit can be run in 1 shell original exploit requires 2 shells. Compile make all Create mount point for fuse filesystem mkdir -p /tmp/fusepwn/lower Star...
Mlflow < 2.11.0 - Path Traversal
A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...
CVE-2023-32784-keepass-linux
KeePass 2.53/cmdline files and store the pid of ones with the keyword KeePass in their commandline argument. It'll then acquire the adresses of memory maps in /proc//maps that aren't directly associated with a library, meaning they have an empty file path. It'll then store the memory of all those...
google-poc
To reporoduce the CVE-2025-13425 just follow the steps below: Step 1: Clone the fresh osv-scalibr source code: $ git clone https://github.com/google/osv-scalibr Step 2: Remove the code mentioned in fix commit https://github.com/google/osv-scalibr/commit/e67c4e198ca099cb7c16957a80f6c5331d90a672 St...
RefluxFS_CVE-2026-64600
🚨 CVE-2026-64600 — RefluxFS Linux Kernel Local Privilege Escalation LPE 📖 Overview CVE-2026-64600 "RefluxFS" is a Linux kernel vulnerability affecting the RefluxFS filesystem implementation. The flaw stems from improper validation of filesystem metadata, potentially leading to kernel memory...
ghidra-firmware-utils
Ghidra Firmware Utilities PC ファームウェアのリバースエンジニアリングを支援する Ghidra 用の各種モジュールです。 これは coreboot プロジェクトの GSoC 2019 プロジェクトとして採択されました。 機能 PCI option ROM ローダー PCI option ROM 用の FS ローダーを実装（複数イメージを含むハイブリッド ROM を処理。例: レガシー x86 + UEFI） PCI option ROM から UEFI 実行ファイルをロード（圧縮イメージを含む） レガシー x86 option ROM...
CVE-2021-3493
CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit chmod +x exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it di...
exploit-CVE-2023-27564
Exploit for CVE-2023-27564 This vulnerability allows anonymous file read in n8n. import requests url = "https://example.com/rest/data/filesystem:..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd:.svg" response = requests.geturl printresponse.statuscode printresponse.headers...
git_rce
Remote Code Execution Attack via git clone CVE-2024-32002 Contributors 이정우@Roronoawjd Background This vulnerability is a Remote Code Execution RCE vulnerability that occurs when cloning a git repository containing submodules on case-insensitive file systems such as Windows and macOS. RCE is a...
CVE-2021-35492
Exploit Information Exploit Title: Wowza Streaming Engine 4.8.11+5 - Denial of Service CVE: CVE-2021-35492 Date: 2021-10-06 Exploit Author: N4nj0 Software Link: https://www.wowza.com/products/streaming-engine Version: 4.8.11+5 Tested on: Wowza Streaming Engine = 4.8.11+5 Vulnerability Advisory:...
CVE-2021-3493
CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...
CVE-2026-71557-poc
CVE-2026-71557: go-git reference name path traversal PoC English version 概要 このリポジトリは、go-git の公開アドバイザリ GHSA-qgq7-7hm3-q39j に基づく CVE-2026-71557 の安全なローカル PoC です。 修正前の storage/filesystem は、loose reference の名前を十分に検証せず .git/ のパスとして使用していました。そのため、 refs/heads/../../config のような参照名を渡すと .. が正規化され、 本来の...
CVE-2026-103626
A flaw was found in the FileSystem component of Google Chrome. Due to an incorrect authorization issue, a remote attacker can execute arbitrary code outside the browser sandbox by tricking a user into interacting with a specially crafted HTML page. This escape from the browser's restricted securi...
