WhatsApp-Double-Free-Vulnerability_CVE-2019-11932

WhatsApp-Double-Free-VulnerabilityCVE-2019-11932 Exploit Analysis of The WhatsApp Double-Free Vulnerability CVE-2019-11932 Using the GEF-GDB Debugger This vulnerability was found by researcher Awakened, who published an exploit PoC of this bug. In this blog, I will demonstrate how this exploit...

CVE-2026-49083

CVE-2026-49083 CVE-2026-49083 LatePoint Calendar Booking Plugin Privilege Escalation Exploit...

SessionReaper-CVE-2025-54236

SessionReaper — CVE-2025-54236 Unified PoC for CVE-2025-54236 "SessionReaper", a critical unauthenticated RCE in Magento 2 / Adobe Commerce via nested deserialization in the REST API. CVSS: 9.1 Critical Root cause: Improper Input Validation CWE-20 in ServiceInputProcessor; the exploit primitive i...

CVE-2026-69212

CVE-2025-69212 — OpenSTAManager OS Command Injection RCE Proof-of-concept exploit for CVE-2025-69212 , an OS Command Injection vulnerability in OpenSTAManager = 2.9.8 that allows an authenticated attacker to achieve Remote Code Execution via a maliciously crafted ZIP file upload. Advisory CVE:...

CVE-2019-25065-poc

CVE-2019-25065 python exploit for CVE-2019-25065 an OS command injection in OpenNetAdmin =18.1.1...

Linksys-WRT54GL-Exploitation

From Solder to Shell: Full Hardware Exploitation of the Linksys WRT54GL Router CVE-2022-43973 A 10-phase embedded security research journey — from JTAG pin discovery to remote code execution on a MIPS-based consumer router. | ---|--- Author| Umberto Della Monica Role| MSc Cybersecurity Student —...

Exploit-CVE-2017-6008

Exploit-CVE-2017-6008 The CVE-2017-6008 is a vulnerability in the HitmanPro scan that allows privilege escalation by exploiting a kernel pool buffer overflow. The exploits here use the Quota Process Pointer Overwrite attack as described in the Tarjei Mandt's paper Also, the exploits use my Pool...

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend TL;DR Yo, in this LetsDefend lab I dove into a SharePoint zero-day called ToolShell CVE-2025-53770. Basically, I mimicked a real-world attack where a malicious POST request bypassed auth, ran PowerShell to steal MachineKeySection keys,...

CVE-2024-21413-Outlook-Assessment

title: "CVE-2024-21413 Moniker Link: Microsoft Outlook Remote Code Execution Assessment" date: 2026-06-28 author: Lindon Mitchell YoguiCR role: Security Researcher / Exploit Analyst status: Completed classification: Public / Portfolio environment: TryHackMe - Moniker Link Lab Vulnerability...

CVE-2025-54253-Inside-the-Adobe-AEM-Forms-Zero-Day

CVE-2025-54253: Inside the Adobe AEM-Forms Zero-Day — What Pentesters & Defenders Must Do TL;DR: Adobe Experience Manager AEM Forms on JEE ≤ 6.5.23.0 contained a critical, network-accessible flaw CVE-2025-54253 that allows unauthenticated remote code execution via misused Struts/OGNL endpoints. A...

CVE-2023-2008

CVE-2023-2008 Proof of concept exploit for CVE-2023-2008, a bug in the udmabuf driver of the Linux kernel fixed in 5.19-rc4. You can find a description of the bug and the exploitation strategy in our blog post. The exploit was tested on a vulnerable Ubuntu 22.04, and it requires access to the...

CVE-2025-3419

CVE-2025-3419 - WordPress Eventin = 4.0.26 - Arbitrary File Read 🔥 Vulnerability Summary The Eventin plugin = 4.0.26 for WordPress contains an unauthenticated arbitrary file read vulnerability in the proxyimage function. Attackers exploit insufficient input validation by manipulating the url...

WEB-CLI_RCE_React2Shell

REACT2SHELL 🎯 Quick Overview What is this? This tool is a simple Proof-of-Concept PoC exploit for CVE-2025-55182. This is a serious flaw Prototype Pollution found in Next.js applications that use React Server Components. If a target server is vulnerable, this script lets you run operating system...

CVE-2026-59734-POC

Glitch de Hacker 🚨 CVE-2026-59734 — Exploit RCE en Coolify Inyección de Comandos del SO en Health Check → Ejecución Remota de Código...

CVE-2026-23744-poc

CVE-2026-23744 — mcpJam Remote Code Execution RCE Exploit A Python 3 proof-of-concept exploit for CVE-2026-23744 , an arbitrary command execution vulnerability affecting mcpJam v1.4.2. This utility automates payload delivery by transparently Base64-encoding commands before transmission, helping...

CVE-2026-50229

⚡ CVE-2026-50229 — Apache Tomcat Examples XSS Exploit...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

Copy Fail CVE-2026-31431 Vulnerability Analysis and Response Practice This project analyzes the operational principle of the Linux Kernel Copy Fail CVE-2026-31431 vulnerability and compares the pre-patch and post-patch state using the non-destructive checker from the public PoC repository. It doe...

CVE-2020-1206

In the SMBGhost vulnerability CVE-2020-0796 I talked about a write-what-where primitive technique through the use of an integer overflow bug to change the pointer Alloc.Userbuffer to point to an address we desire and write arbitrary data into it. Similar to SMB Ghost, this vulnerability also exis...

OpenSTAManager-RCE-Exploit-CVE-2026-38751

OpenSTAManager RCE Exploit CVE-2026-38751 Arbitrary File Upload leading to Remote Code Execution Full-featured proof-of-concept for CVE-2026-38751 , written in Rust. Warning: This tool is intended for authorised security testing and educational purposes only. Use it only on systems you own or hav...

CVE-2026-42758

CVE-2026-42758 CVE-2026-42758 WebinarIgnition Exploit Usage Examples Basic Usage python3 exploit.py https://target.example.com -e [email protected] Specify Webinar Page python3 exploit.py https://target.example.com -e [email protected] -w https://target.example.com/webinar/my-webinar/...