PoC-CVE-2025-26529

PoC for CVE-2025-26529 – Moodle XSS to RCE Exploit This is a Proof of Concept PoC demonstrating the SSRF to XSS → XSS to RCE vulnerability chain in Moodle. Overview I’ve uploaded all the necessary files to demonstrate the full chain of exploitation: 1. SSRF to XSS 2. Grabbing the admin cookie 3...

DCSYNCMonitor

DCSYNCMonitor Description This tool is an application/service that can be deployed on Domain controllers to alert on Domain Controller Syncronization attempts. When an attempt is detected, the tool will write an event to the Windows Event Log. These events can be correlated in a SIEM. In addition...

CVE-2025-29824-Exploit

🚨 CVE-2025-29824 Exploit: PipeMagic Ransomware Chain 📌 Critical Vulnerability Overview Privilege Escalation Flaw in Windows CLFS → SYSTEM Privilege Hijack Exploited in Active Ransomware Attacks by Storm-2460 Threat Group 🖥️ Affected Systems Expand System List 🧩 Exploit Chain Workflow graph LR...

CVE-2024-24919-PoC

CVE-2024-24919-PoC Vulnerability References https://nvd.nist.gov/vuln/detail/CVE-2024-24919 https://censys.com/cve-2024-24919/ https://vulners.com/cve/CVE-2024-24919 https://support.checkpoint.com/results/sk/sk182336 Hotfix About CVE-2024-24919 The vulnerability allows an unauthenticated remote...

CVE-2026-113735

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlinksetrootpwd of the file /mnt/mtd/aoniipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of...

Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: WindowsAFDLPECVE-2023-21768.exe where is the process ID in decimal of the...

CVE-2024-51567-RCE-EXPLOIT

CVE-2024-51567-RCE-EXPLOIT cbyerpanel rce exploit...

CVE-2022-36804-PoC

CVE-2022-36804-PoC Multithreaded exploit script for CVE-2022-36804 affecting most BitBucket versions 8.3.1 See the full advisory here https://jira.atlassian.com/browse/BSERV-13438 All credit to TheGrandPew for discovery The script will automatically detect public repositories located on bitbucket...

CVE-2018-11776

CVE-2018-11776 Proof of Concept exploit so I could quickly assess what sorts of protections and fixes are available. Originally found by Man Yue Mo, Semmle: https://semmle.com/news/apache-struts-CVE-2018-11776 Semmle had a "Apache Struts RCE - CVE-2018-11776 - PoC Exploit Demo" YouTube video up f...

CVE-2026-113737 R6410418 Jackrong-llm-finetuning-guide qwen_mtp_gguf_pipeline.py validate_indexed_tensors path traversal

A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This affects the function validateindexedtensors of the file qwen-mtp-gguf/scripts/qwenmtpggufpipeline.py. Executing a manipulation of the argument weightmap can lead to path traversal...

CVE-2026-113737 R6410418 Jackrong-llm-finetuning-guide qwen_mtp_gguf_pipeline.py validate_indexed_tensors path traversal

A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This affects the function validateindexedtensors of the file qwen-mtp-gguf/scripts/qwenmtpggufpipeline.py. Executing a manipulation of the argument weightmap can lead to path traversal...

CVE-2026-113737

A path traversal vulnerability exists in R6410418 Jackrong-llm-finetuning-guide (up to commit ef2b17f2798cd18cd85375080c35a58397ad0d09). The flaw is located within the validate_indexed_tensors function of the qwen-mtp-gguf/scripts/qwen_mtp_gguf_pipeline.py file. An attacker can perform a remote a...

EUVD-2026-106989

A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This affects the function validateindexedtensors of the file qwen-mtp-gguf/scripts/qwenmtpggufpipeline.py. Executing a manipulation of the argument weightmap can lead to path traversal...

CVE-2026-27831-POC

CVE-2026-27831-POC Poc Exploit for CVE-2026-27831 This is proof of concept exploit for remote heap based out-of-bound read at rldns version 1.3 that causes denial of service. rldns is an open source DNS server for linux, freebsd & netbsd, running on x8664 architecture. Rldns Version 1.3 has a...

SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

SOC336 - Windows OLE Zero-Click RCE Exploitation Detected CVE-2025-21298 Walkthrough 🔎 Table of Content 1. Situation 2. Alert Overview 3. Tools Used 4. Analysis Email Security Log Management Proxy Log Endpoint Security Terminal History Network Action Processes CVE-2025-21298 Playbook Analyst Note...

n8n-function-vm2

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · n8n-function-vm2 n8n-function-vm2 n8n 2.42.0 - n8n GmbH GHSA-j4p8-h8mh-rh8q moved n8n-nodes-base.code onto the JS task-runner child. Production spawn adds --disallow-code-generation-from-strings and...

CVE-2021-26855-d

Basic usage:python owamails.py -u -l -p optional arguments: -h, --help show this help message and exit -u URL, --url URL Url, provide schema and not final / eg https://example.org -l LIST, --list LIST Users mailbox list -p PATH, --path PATH Path to write emails in xml format -f FQDN, --fqdn FQDN...

Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028

Ghost Arbitrary File Read Exploit CVE-2023-40028 Overview This script exploits a vulnerability in Ghost CMS CVE-2023-40028 to read arbitrary files from the server. By leveraging a symlink in an uploaded ZIP file, an attacker can gain unauthorized access to sensitive files on the system. Features ...

Blacklist3r

Blacklist3r The goal of this project is to accumulate the secret keys / secret materials related to various web frameworks, that are publicly available and potentially used by developers. These secrets will be utilized by the Blacklist3r tools to audit the target application and verify the usage ...

CVE-Exploit-Research-Development

🔐 SSH Exploit Tool Educational Use Only 📌 Description This tool demonstrates exploitation of: CVE-2008-0166 CVE-2008-1657 It connects to vulnerable SSH services and provides: Persistent interactive shell Command execution logging Automatic PDF & DOCX report generation ⚙️ Features Persistent shell...