EUVD-2026-98829

A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::saveuser of the file adminclass.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be...

CVE-2015-0568

Exploits exploit for CVE-2015-0568 Links codeaurora c0reteam...

CVE-2025-6218-POC

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...

SMBGhost-LPE-Metasploit-Module

SMBGhost-LPE-Metasploit-Module This is an implementation of the CVE-2020-0796 aka SMBGhost vulnerability, compatible with the Metasploit Framework Notes: This module made to be used when you have a valid shell to escalate your privileges. You can change the payload, if you want to have your custo...

linux-basics-for-hackers-notes

Linux Basics for Hackers — Course A structured course built from personal study notes of the book Linux Basics for Hackers by OccupyTheWeb. Each module breaks down the core concepts, commands, and practical examples in plain English — straightforward enough for beginners, detailed enough to...

DLLHijackingScanner

UAC bypass - DLL hijacking Description This is a PoC for bypassing UAC using DLL hijacking and abusing the "Trusted Directories" verification. Summary Generate Header from CSV Arguments Generate the list of vulnerable PE and DLL DLLHijacking.exe Log file Execution Result test.dll Sources Generate...

deepce

deepce . == === /"""""""""""""""""/ === / ===- \ X / \ \ / \/ / / / / / / / / \ ENUMERATE / // / / / // / / / ESCALATE ,/// ./// ESCAPE // Website Docker Enumeration, Escalation of Privileges and Container Escapes DEEPCE In order for it to be compatible with the maximum number of...

vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

cve-2024-0012-gui-poc

CVE-2024-0012 and CVE-2024-9474 Authentication Bypass in the Management Web Interface PAN-SA-2024-0015 and Authenticated Command Injection in Palo Alto PAN-OS. See the blog post for technical details. Exploit authors Original exploit written by Sonny of watchTowr @watchtowrcyber. Code and GUI...

CVE-2024-50379-POC

CVE-2024-50379-POC This repository contains a Python script designed to exploit CVE-2024-50379 , a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly useful when the /uploads directory is either...

CVE-2020-24186-exploit

CVE-2020-24186-exploit Attack script for CVE-2020-24186 Exploit usage: Commands: Windows/Linux: python3 CVE-2020-24186.py -u -p Example: python3 CVE-2020-24186.py -u http://127.0.0.1 -p /wordpress/2022/04/04/hello-world...

CVE-2018-8120

CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Supports both x32 and x64. Tested on: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64. Usage CVE-2018-8120 exploit by @unamerhttps://github.com/unamer Usage: exp.exe command Example: exp.exe "net us...

CVE-2019-8389

CVE-2019-8389 - Arbitrary file read in Musicloud for iOS v1.6 CVE-2019-8389 An exploit code for exploiting a local file read vulnerability in Musicloud v1.6 iOS Application Description: A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the...

CVE-2018-7750

CVE-2018-7750 an RCE remote command execution approach of CVE-2018-7750 Exploit Title: Paramiko 2.4.1 - Remote Code Execution Date: 2018-11-06 Exploit Author: jm33-ng Vendor Homepage: https://www.paramiko.org Software Link: https://github.com/paramiko/paramiko/archive/2.4.0.tar.gz Version: 1.17.6...

LID

██╗ ██╗██████╗ ██║ ██║██╔══██╗ ██║ ██║██║ ██║ ██║ ██║██║ ██║ ███████╗██║██████╔╝ ╚══════╝╚═╝╚═════╝ Linux Integrity Drift — "Linux is Dying" — Systematic discovery of kernel code paths that bypass LSM security guarantees The gate was never breached. It was walked around. What is LID? The Linux...

Curveball

Curveball A PoC for CVE-2020-0601. A detailed blog post can be found here. This exploit allows you to create a fake trusted certificate by abusing how CryptoAPI handles certain parameters on ECC based certificates. Setup Clone the repository and open it in Visual Studio 2019. Switch to Release an...

CVE-2019-7214

CVE-2019-7214 Remote Code Execution in .NET deserialization for the SmarterMail system. Collection Please find a collection of proof of concepts for the exploit in this repository. Some may work as intended without modification and some may require modification...

CVE-2025-55184-POC-Expolit

🔥 CVE-2025-55184 Advanced Exploitation Tool Professional React Server Components DoS Exploitation Framework "KEEP LEARNING KEEP HACKING" - CyberTechAjju 🚀 Quick Start • 📖 Documentation • 💻 Features • ⚠️ Disclaimer 🎯 About CVE-2025-55184 CVE-2025-55184 is a high-severity Denial of Service DoS...

kprotect

🛡️ kprotect Overview kprotect is a kernel-level security engine designed to protect your sensitive data from supply-chain attacks like malicious Python or Node.js libraries. It stands as an independent security layer for the most sensitive files. eBPF-LSM Enforcement : Intercepts file access at th...

CVE-2024-2961-Remote-File-Read

CVE-2024-2961 Remote File Read This script demonstrates how to exploit a vulnerability in systems using the iconv library when it mishandles character encoding conversions, as described in CVE-2024-2961. It allows an attacker to read arbitrary files from the server by taking advantage of PHP filt...