CVE-2026-41940-Exploit-PoC

CVE-2026-41940 Exploit PoC – cPanel & WHM Authentication Bypass Tool by: Ishan Oshada | GitHub ⚠️ FOR AUTHORIZED SECURITY TESTING ONLY. Unauthorized use is illegal. 📋 Table of Contents Vulnerability Overview Exploit Chain Features Installation Quick Start Usage Examples Post-Exploit Actions...

CVE-2026-31431

CVE-2026-31431 Copy Fail — C PoC Trivial unprivileged LPE by writing 4 controlled bytes into the page cache of any readable file via a logic bug in AFALG kernel 4.14 → early 2026. Corrupt /usr/bin/su in-memory, then run it → root. Build & Run 1. Generate an ELF payload reverse shell example...

CVE-2026-34159-Vulnerability-Research-Analysis-Detection

CVE-2026-34159-Vulnerability-Research-Analysis-Detection Critical buffer validation bypass in deserializetensor llama.cpp b8492. Null tensor buffer skips bounds check, enabling unauthenticated arbitrary R/W via GRAPHCOMPUTE. ASLR bypass + RCE over TCP 50052. Contains: Technical analysis & exploit...

kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure

A flaw was found in the Linux kernel's vfio/pci component. During device initialization, a memory pointer is not properly cleared after being freed, leading to a use-after-free and double-free vulnerability. A local attacker could exploit this flaw to cause a system crash, resulting in a denial o...

kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path

A flaw was found in the Linux kernel's IPv4 forwarding information base FIB component. A local attacker with administrative network capabilities CAPNETADMIN could exploit a timing issue during route insertion and lookup operations. This could lead to a "use-after-free" vulnerability, where the...

kernel: fuse: re-lock request before returning from fuse_ref_folio()

A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. The fusereffolio function does not properly re-lock a request after unlocking it, which can lead to a use-after-free vulnerability. A local attacker could exploit this flaw to potentially execute arbitrary code or caus...

kernel: ALSA: seq: close a re-opened queue timer in the destructor

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...

CVE-2018-10933

libSSH-Authentication-Bypass Spawn to shell without any credentials by using CVE-2018-10933 Exploit-DB : https://www.exploit-db.com/exploits/45638 Information about CVE-2018-10933 by libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Bugfix Release by libSSH :...

ysoserial.net

A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discovered in common .NET libraries that can, under the right conditions, exploit .NET...

CVE-2026-9830

-orange?style=for-the-badge CVE-2026-9830 — BookingPress Pro Authentication Bypass Comprehensive Cybersecurity Threat Intelligence Investigation Overview • Reports • Key Findings • Technical Details • Risk Assessment • Mitigation • References 📋 Overview CVE-2026-9830 is a critical authentication...

Juiceshopgl

Juice Shop Logo OWASP Juice Shop Test Coverage Maintainability The most trustworthy online shop out there. @dschadow — The best juice shop on the whole internet! @shehackspurple — Actually the most bug-free vulnerable application in existence! @vanderaj — First you 😂😂then you 😢 @kramse — But this...

Windows-RCE-exploits

My other github repo for vendor testing against fileless attacks - https://github.com/smgorelik/VendorSimTestScripts Windows-RCE-exploits The exploit samples database is a repository for RCE remote code execution exploits and Proof-of-Concepts for WINDOWS , the samples are uploaded for education...

F5-CVE-2022-1388-Exploit

F5-CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage Check against single host python3 CVE-2022-1388.py -v true -u targeturl Attack host and test command python CVE20221388.py -a true -u targeturl -c command Attack list of hosts python CVE20221388.py -s true -f file...

CVE-2025-13780

CVE-2025-13780: pgAdmin 4 = 8.14 RCE Scanner A comprehensive vulnerability scanner for CVE-2025-13780 , a Remote Code Execution RCE vulnerability in pgAdmin 4 versions ≤ 8.14. 🔍 Vulnerability Details The vulnerability exists in the Restore feature of pgAdmin 4. The application attempts to block...

cve-2024-4577-lab

CVE-2024-4577 — PHP-CGI Argument Injection → RCE Docker Lab / CTF A self-contained, from-scratch Docker lab that demonstrates the real argument-injection → Remote Code Execution primitive behind CVE-2024-4577. Exploit it over http://localhost:8080, pop a shell, and read the flag from inside the...

mach_race

Mach Race OS X Local Privilege Escalation Exploit c fG! 2015, 2016, [email protected] - https://reverse.put.as A SUID, SIP, and binary entitlements universal OS X exploit CVE-2016-1757. Usage against a SUID binary: ./machraceserver /bin/ps compatmode for i in seq 0 1000000; do...

defcon33_silence_kill_edr

🛡️ DEFCON Workshop: Putting EDRs in Their Place 💀 Killing and Silencing EDR Agents Like an Adversary Setup EDR Killing Custom EDR Evasion 🎯 What You’ll Do Each student will be provisioned their own lab environment to: 🔍 Investigate a live EDR agent: discover its hooks, logs, and reach ⚔️ Compile &...

CVE-2025-5947_Exploit

🔍 WordPress Plugin Exploit — Service Finder sf-booking Overview The Service Finder plugin is a booking and service management system for WordPress. Because of its popularity and complexity, some versions have had security issues related to unauthenticated AJAX endpoints or improper access control...

CVE-2026-31431

CVE-2026-31431 CopyFail standard binary Get all new CVE alert on https://exploitroom.com mail :: /Desktop/CVE-2026 » file exploit: ELF 64-bit LSB executable, x86-64, version 1 GNU/Linux, statically linked, BuildIDsha1=9454dbdde0ac2d1a8981c06db89f24a4753ec3b7, for GNU/Linux 3.2.0, not stripped...

TakeOver-v1

TakeOver-v1 What is Subdomain Takeover? Subdomain Takeover is a type of vulnerability that arises when a subdomain points to an external service that has been deleted or is no longer in use. Common examples of these external services include Github, Heroku, Gitlab, and Tumblr. In this scenario, a...