CVE-2025-55449

CVE-2025-55449 - Vulnerabilidad de Ejecución Remota de Código RCE en AstrBot Resumen Este repositorio contiene un exploit de prueba de concepto para CVE-2025-55449 , una vulnerabilidad crítica de Ejecución Remota de Código RCE en AstrBot. La vulnerabilidad permite a un atacante ejecutar código...

Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46072 Título del exploit: Vehicle Service Management System - 'Service List' Cross Site Scripting XSS Almacenado Autor del exploit: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIO Referencias:...

CVE-2026-42945

CVE-2026-42945 Nginx Rift - PoC Toolkit A comprehensive proof-of-concept toolkit for CVE-2026-42945 Nginx Rift, a critical heap buffer overflow vulnerability in Nginx's ngxhttprewritemodule. Vulnerability Summary Field| Details ---|--- CVE ID| CVE-2026-42945 Name| Nginx Rift Type| Heap Buffer...

CVE-2025-4802-Proof-of-Concept

CVE-2025-4802 — Prueba de Concepto ⚠️ Aviso: Este repositorio es solo para fines educativos y de investigación de seguridad autorizados. No use este exploit contra sistemas que no posea o para los que no tenga permiso explícito para probar. El uso indebido puede violar leyes y regulaciones. Resume...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Freefloat Freefloat_Ftp_Server

🐞CVE-2025-5548 Buffer overflow in FreeFloat FTP Server 1.0 !...

EUVD-2026-72321

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

CVE-2026-86292 SourceCodester Simple Traffic Offense System User Creation saveuser.php missing authentication

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

CVE-2026-86292

SourceCodester Simple Traffic Offense System 1.0 is vulnerable to missing authentication in the User Creation component, specifically the file saveuser.php . Manipulating the position argument allows an unauthenticated remote attacker to bypass access controls, leading to low impacts on confident...

brokeCLAUDIA

🔓 brokeCLAUDIA - CVE-2025-41090 CVE-2025-41090 - Vulnerabilidad de control de acceso roto en microCLAUDIA 📑 Tabla de contenidos ¿Qué es microCLAUDIA? Vulnerabilidad CVE-2025-41090 📂 Divulgación pública CWE Control de acceso roto Remediación Presentación Exploit 📂 Resumen Requisitos Instalación Us...

CVE-2026-69836-EXP

CVE-2026-69836 Entra ID Unauthenticated RCE Proof of Concept Overview CVE-2026-69836 is a critical unauthenticated remote code execution vulnerability in Microsoft Entra ID due to improper deserialization of untrusted data CWE-502. The flaw allows attackers to execute arbitrary code over the...

Exploit for SQL Injection in Google Android

CVE-2026-28576: SQL Injection in the Android Contacts Provider...

varlib-cve-2025-66034

fontTools varLib CVE-2025-66034 Exploit This repo doesn't introduce a new vulnerability. This is a Proof-of-concept exploit for CVE-2025-66034 affecting the fontTools varLib variable font generation pipeline. The vulnerability allows attackers to control the output filename inside a crafted...

Abyssal

🔥 Abyssal CVE-2026-24061 Telnet Vulnerability Scanner & Exploit From the depths, we rise. Multi-threaded, false-positive detection, interactive root shell on success. 👨‍💻 About the Author This project was built by an experienced IT professional with decades of hands-on work in network security,...

CVE-2025-47812

CVE-2025-47812 Este es un PoC Proof of Concept del Exploit para Wing FTP Server CVE-2025-47812 Descripción Las versiones de Wing FTP Server anteriores a la 7.4.4 sufrieron una vulnerabilidad de Ejecución Remota de Código RCE como resultado del tratamiento inseguro del parámetro username. Cuando s...

CVE-2020-27955-LFS

Git-lfs 远程代码执行 RCE 漏洞利用 CVE-2020-27955 .bat / powershell 版本 受影响: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 等。 发现者: Dawid Golunski https://legalhackers.com https://exploitbox.io 在 Windows 上测试: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code,...

CVE-2025-6440-Poc-Exploit

WC Designer Pro — Carga Arbitraria de Archivos sin Autenticación Prueba de concepto de investigación de seguridad Una prueba de concepto no destructiva para una vulnerabilidad de carga arbitraria de archivos sin autenticación que afecta al plugin de WordPress WC Designer Pro. Tabla de contenidos...

CVE-2025-32462-CVE-2025-32463-PoC-Lab

CVE-2025-32462 y CVE-2025-32463 – Laboratorio Avanzado de PoC Este repositorio proporciona un laboratorio basado en contenedores y un PoC detallado para dos vulnerabilidades críticas de sudo: CVE-2025-32462 – Omisión de la lógica de coincidencia de host de sudo -h CVE-2025-32463 – Escape de la...

CVE-2026-86285

A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/AttachmentController.php of the component Attachment Edit Endpoint. The manipulation of the argument ID results in improper acces...

CVE-2026-86289

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public...

CVE-2026-86288

A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file gptqmodel/nnmodules/qlinear/tritonv2.py of the component Triton dequantization kernel. Such manipulation of the argument gidx leads to out-of-bounds read. The attack can be...