841064 matches found
pwn2own2018
Pwn2Own 2018: Safari + macOS Safari RCE, sandbox escape, and LPE to kernel for macOS 10.13.3. Usage Install nasm and tornado: root@kitploit: brew install nasm pip3 install tornado Check config.py if you want to change the host or ports. Afterwards start the server with ./server.py and navigate to...
QuickBox-Pro-2.1.8-Authenticated-RCE
QuickBox-Pro-2.1.8-Authenticated-RCE An authenticated low-privileged user can exploit a command injection vulnerability to get code-execution as www-data and escalate privileges to root due to weak sudo rules. QuickBox Pro v2.1.8 and prior is vulnerable...
CVE-2021-4034
CVE-2021-4034 pkexec Local Privilege Escalation exploit...
Detrix-Passwords-PoC
Exploit for obtaining Detrix users' passwords. http://forum.detrix.kz https://zen.yandex.ru/media/id/5d947e04f73d9d00ad0e86cc/uiazvimosti-sed-detrix-besplatnoi-programmy-avtomatizacii-dokumentooborota-5d947e2e92414d00ae292db7...
Exploit for Use After Free in Linux Linux_Kernel
RMV Exploit β ΡΠΈΡΡΠ°Ρ ΡΠ±ΠΎΡΠΊΠ° CVE-2026-43499 Π΄Π»Ρ iQOO Neo 11 PD...
FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response
A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...
FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response
A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...
Pluck-CMS-Pluck-4.7.16-Theme-Upload-Remote-Code-Execution-Authenticated--POC
Pluck-CMS-Pluck-4.7.16-Theme-Upload-Remote-Code-Execution-Authenticated-POC Exploit Author: Ashish Koli Shikari Vendor Homepage: https://github.com/pluck-cms/pluck Version: 4.7.16 CVE: CVE-2022-26965 About this: This script uploads shell.tar to the PluckCMS. An application will untar the package...
Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated-POC
Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated- Remote Code Execution RCE Exploit Author: Ashish Koli Shikari Vendor Homepage: https://thedigitalcraft.com/ Software Link: https://github.com/thedigicraft/Atom.CMS Version: 2.0 CVE: CVE-2022-25487 About this: This script uploads...
hekate
Hekate - A VMWare Workspace ONE Access Remote Code Execution Exploit Steven Seeley of Qihoo 360 Vulnerability Research Institute Original rogue MySQL server by LandGrey Details Hekate is pronounced as heh-ka-teh Date: Tue Feb 22 13:37:00 CST 2022 Version: 21.08.0.1 latest File:...
POC-CVE-2026-5027
Description Proof of concept exploit code for CVE-2026-5027 Usage python3 poc.py -u -c -a "bash command arg File written to Docker container disk...
Exploit for CVE-2026-72815
CVE-2026-72815: go-chi/chi middleware.RealIP IP Spoofing PoC...
ip-camera-research
IP Camera Research - Fullhan FH8626V100 AJL30PG0803 Security research on a consumer IP camera built on the Fullhan FH8626V100 SoC model AJL30PG0803, resulting in six assigned CVEs covering unauthenticated API access, plaintext credential disclosure, and full unauthenticated device compromise via ...
LAB1-metasploitable
LAB1-metasploitable Exploitation des vulnΓ©rabilitΓ©s sur la version vsftpd 2.3.4 du service ftp CVE-2011-2523 Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution Date: 9-04-2021 Exploit Author: HerculesRD Software Link: http://www.linuxfromscratch.org/thomasp/blfs-book-xsl/server/vsftpd.html...
CVE-2026-73570
CVE-2026-73570 β Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview...
Exploit-CVE-2026-56705
CVE-2026-56705 β Adminer MSSQL DSN Injection Mass Exploiter πΎπ€π£π©πππ©: ππ€π§πͺ ΩΩΨ±Ω π₯ https://t.me/ChiefYoru β Channel https://t.me/TeamLeets β Group https://t.me/ChiefYoruPoCs π Description This tool exploits CVE-2026-56705 , an unauthenticated Remote Code Execution RCE vulnerability in Adminer 5.4.3...
CVE-2026-41940-AuthBypass-Detector
CVE-2026-41940 Detection & Verification Overview This tool detects cPanel/WHM instances vulnerable to CVE-2026-41940 , a critical authentication bypass discovered by watchTowr Labs. The vulnerability allows an unauthenticated attacker to gain root access to WHM via a CRLF injection in the session...
vivo-root-build
PD2415 6.6.89 Full-Flow Candidate This source is based on the same-device/same-SoC PD2415 6.6.57 IonStack engine: perf KASLR, pselect GhostLock, CFI fops, pipe physrw. The dumpstate carrier closure is retained from the validated PD2241 method. The archived 6.6.89 target keeps...
adbHijacker
CVE-2026-0073 β Android ADB TLS Authentication Bypass A proof-of-concept exploit and network scanner for CVE-2026-0073 , a critical zero-click, no-interaction remote code execution vulnerability in Android adbd's ADB-over-TCP authentication path. The vulnerability is a logic bug in...
cPanelSniper
cPanelSniper CVE-2026-41940 β cPanel & WHM Authentication Bypass via Session-File CRLF Injection 4-stage exploit chain Β· Interactive WHM Shell Β· Bulk scanner Β· Pipeline ready Β· stdlib only Overview cPanelSniper is a focused exploitation framework for CVE-2026-41940 , a critical authentication...