46635.py_CVE-2019-9053

46635.pyCVE-2019-9053 This is modified code of 46635 exploit from python2 to python3. run file contain 46635 modified code . . Download run file and use this...

CVE-2021-32708

CVE-2021-32708 Affected versions of this package are vulnerable to Race Condition. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific conditions this could potentially allow a malicious user to execute code remotely. How the Exploit Works...

CVE-2026-3333-DNS-Rebinding-to-Steal-Cloud-Metadata

CVE-2026-3333 – DNS Rebinding to Steal Cloud Metadata Program Code Python attacker server + vulnerable app !/usr/bin/env python3 dnsrebindingserver.py - Malicious DNS server that alternates between attacker IP and 169.254.169.254 import socket, threading, time This simple server resolves any...

CVE-2017-0213

CVE-2017-0213: Windows COM Elevation of Privilege Vulnerability Description Author: Google Security Research CVE: 2017-0213 EDB-ID: 42020 References: Project-Zero Microsoft Exploit-Database Video: Youtube Affected Products Product| Version| Update| Build| Tested ---|---|---|---|--- Windows 10|...

freddy

Freddy the Serialisation Killer - Deserialization Bug Finder A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs. This useful extension was originally developed by Nick Bloor @nickstadb for NCC Group and is mainly based on the work of Alvaro Muñoz and Oleksandr...

CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server

CVE-2026-7777 – Rust Use‑After‑Free in Unsafe Web Server Program Code Rust // uafserver.rs - Vulnerable Rust HTTP server with use-after-free use std::sync::Arc, Mutex; use std::thread; use std::io::prelude::; use std::net::TcpListener, TcpStream; struct SharedBuffer data: Vec, impl SharedBuffer f...

dfir-malware-investigation

DFIR Malware Investigation Lab – Spring4Shell CVE-2022-22965 A comprehensive Digital Forensics & Incident Response DFIR project that simulates, detects, and investigates the Spring4Shell CVE-2022-22965 critical vulnerability. This project demonstrates the complete incident response lifecycle from...

CVE-2021-44168

Exploit for CVE-2021-44168 Purpose Exploit CVE-2021-44168 to drop a shell on a Fortigate firewall and enable its access via LDPRELOAD tricks that execute when running some of Fortigate's CLI commands. You get a root shell. Use Compile: gcc -o gensrc-vispkgfile gensrc-vispkgfile.c -lz Run: %...

CVE-2025-50165-x64-Exploit

CVE-2025-50165 Windows Graphics Component RCE x64 Critical Remote Code Execution via malicious JPEG – Windows 11 24H2 unpatched CVSS 9.8 – No privileges, no interaction required CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference Discovered by Zscaler ThreatLabz Patched: November 202...

CVE-2026-60004

CVE-2026-60004 — Gitea Diffpatch Git Hook RCE Bare Clone Hook Injection → post-index-change → Arbitrary Command Execution Overview CVE-2026-60004 is a critical-severity CVSS 9.8 pre-authentication remote code execution vulnerability in Gitea and Forgejo self-hosted Git platforms, affecting versio...

sharingIsCaring

sharingIsCaring TwonkyMedia Server Pwnd CVE-2018-7171 Background information This is a GitHub repository keeping all relevant information about CVE-2018-7171. and more CVE-2018-7171 represents a directory/file traversal vulnerability in TwonkyMedia Server version 7.0.11-8.5 latest version...

CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter

CVE-2026-5050 – Blind LDAP Injection via Unescaped Filter Program Code Python with ldap3 simulation ldapserversim.py - Simulated LDAP authentication server from flask import Flask, request, jsonify app = Flaskname Fake user database USERS = 'admin': 'password': 'secret', 'role': 'admin', 'user':...

cupntlm-Automated-Exploit-For-CVE-2025-33073-

cupntlm CVE-2025-33073 — NTLM Reflection Bypass via DNS Coercion Automated exploitation tool for Active Directory environments. Overview cupntlm automates the NTLM reflection/relay attack chain that abuses CVE-2025-33073. It combines DNS record injection, forced authentication coercion PetitPotam...

CVE-2019-14322

CVE-2019-14322 Modification of faisalfs10x exploit: PoC of CVE-2019-14322: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' https://www.acunetix.com/vulnerabilities/web/odoo-lfi-cve-2019-14322/ https://nvd.nist.gov/vuln/detail/CVE-2019-14322 Description A vulnerability...

hekate

Hekate - A VMWare Workspace ONE Access Remote Code Execution Exploit Steven Seeley of Qihoo 360 Vulnerability Research Institute Original rogue MySQL server by LandGrey Details Hekate is pronounced as heh-ka-teh Date: Tue Feb 22 13:37:00 CST 2022 Version: 21.08.0.1 latest File:...

Ethical-Hacking-Tools

Ethical-Hacking-Tools Show some 💚 and ⭐ the Repo to SUPPORT DOWNLOAD Kali Linux 🐉 Parrot OS 🦜 Remnux 🐝 bWAPP 💻 OWASP Juice Shop 🍹 NullSec Linux 🛡️ What is Hacking? 👾 Hacking is identifying weakness in computer systems or networks to exploit its weaknesses to gain access. Hacking can be carried out...

cve-2024-1086-writeup

CVE-2024-1086 Root Cause & Exploitation Target kernels: Linux 6.8 netfilter nftables Novel angle: Logic confusion in nftverdictinit causes refcount double-free, exploitable via heap spray to arbitrary memory write. Table of Contents 1. Background — netfilter / nftables overview 2. Root Cause...

cve-2021-1675

〖EXP〗Ladon Printer Vulnerability Privilege Escalation CVE-2021-1675 Reproduction http://k8gege.org/p/CVE-2021-1675.html Overview On June 9, Microsoft released the June security update patch, fixing 50 security vulnerabilities, including a Windows Print Spooler privilege escalation vulnerability,...

CVE-2026-31431-Linux-Copy-Fail

🛡️ CVE-2026-31431-Linux-Copy-Fail - Execute Custom Shellcode With Ease 📌 Project Overview This software provides a tool to test the Linux CVE-2026-31431 vulnerability. It uses the Rust programming language to interact with system files. The program allows users to run custom shellcode on targeted...

ch55x_firmware_extractor

CH55x firmware extractor The CH55x firmware extractor is used to read out firmware from CH55x integrated circuits. There is no in-built support in the devices for directly reading out the firmware through the bootloader. However, there is a functionality to verify the firmware contents 8 bytes at...