pocs

pocs publicaremos pocs en este repositorio todos los bugs en este repositorio se divulgan de forma responsable...

CVE-2025-5548

Exploitation and Vulnerability Analysis Document purpose: Reflect on the knowledge acquired during the lab deployment, detail the exploitation process for CVE-2025-5548, and outline the next steps toward unknown vulnerability 0-day research. 1. My Vision on Vulnerability Research Throughout this...

CVE-2021-46422-poc

This repository does not have a README...

CVE-2025-48799

Description This is PoC for CVE-2025-48799, an elevation of privilege vulnerability in Windows Update service. This vulnability affects windows clients win11/win10 with at least 2 hard drives. When machine have multiple hard drives it is possible to change location where new content is saved usin...

CVE-2024-9047-PoC

This script is only for authorized system testing. Please cite the source if referenced. For more PoCs, see https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Batch testing: python poc.py -f url.txt Single testing: python poc.py -u your-ip...

CVE-2023-5178

CVE-2023-5178 The exploit for CVE-2023-5178: NVMe-oF-TCP vulnerability, which is a logic error in NVMe-oF-TCP driver during the handle of corrupted Initialize Connection Request. It leads to racy double-free in kmalloc-96 , which can be exploited to gain LPEsee demo below. The exploit targets...

Spring4Shell-POC

Spring4Shell-POC Local reproduction process of Spring4Shell vulnerability Environment Preparation Environment: docker, docker-compose mvn package, generate ./target/ROOT.warshell mvn package Start the serviceshell docker-compose up -d Stop serviceshell docker-compose down Reproduction Process Run...

CVE-2024-29296-PoC

Portainer CVE-2024-29296 Proof of Concept Script Requirements python3 -m venv venv; source venv/bin/activate pip install -r requirements.txt Add usernames to usernames.txt Usage python3 main.py Enter Target URL: Enter Username List: Credits Reported by: https://github.com/ThaySolis/CVE-2024-29296...

CVE-2021-45046

tejas-nagchandi/CVE-2021-45046 Attack Description It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map MDC input data when the logging configuration uses a...

CVE-2017-0037

CVE-2017-0037 Microsoft Browser Memory Corruption Vulnerability This document is about CVE-2017-0037- Microsoft Browser Memory Corruption Vulnerability. It will first introduce what a Remote Code Execution RCE is and then go over through some technical specifics. What is Remote Code Execution? A...

CVE-2020-25748

CVE-2020-25748 Suggested description A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can als...

CVE-2025-5419

POC for CVE-2025-5419...

CVE-2025-50360

Heap Buffer Overflow in Pepper Language Pepper Language is a fast interpreted programming language for simplicity and verbosity. It is dynamically typed and supports garbage collection. Affected Version: Version 0.1.1 and before, Commit 961a5d9988c5986d563310275adad3fd181b2bb7 and before. Status:...

CVE-2023-39539-PoC

CVE-2023-39539-PoC PoC for CVE-2023-39539 in Cacti 1.2.22...

Malicious code in @coopeuch/button (npm)

Source: amazon-inspector ee1a3bb0818d46a9c83659ed32f8ab209477970658d5f6f8241a12c96d137c98 The package's postinstall lifecycle script postinstall.js runs automatically on npm install and harvests installer host identifiers — hostname, username, uid/gid, home directory, non-internal network...

singularity

Singularity of Origin Actualizaciones recientes: NUEVO 2025-11-25 : Chrome lanzó la versión 142 con Local Network Access LNA, que impide las técnicas de ataque de DNS rebinding implementadas en Singularity. La rama LNA-from-Non-Secure-Contexts de Singularity of Origin implementa soporte para Tria...

IOCs

This repository does not have a README...

r4ven

Si encuentras útil este repositorio de GitHub, ¡considera darle una estrella! ⭐️ ▶️ Ver Video - ¡Cómo Usarlo! Este proyecto es una herramienta de investigación y concientización sobre seguridad diseñada para demostrar cómo los navegadores web modernos pueden exponer datos de ubicación, acceso a la...

CVE-2019-16889-poc

Resource Consumption DOS on Edgemax v1.10.6 Resource consumption Denial of service. This was reported last year and has been fixed as of version 2.0.3 . It has been assigned CVE-2019-16889. This is my first time using asyncio, if you see a more efficient way to do this please let me know! See the...

akamai-security-research

Akamai Security Research This repository includes code and IoCs that are the product of research done in Akamai's various security research teams. You can read about our research in Akamai's Security blog. Copyright 2024 Akamai Technologies Inc. Licensed under the Apache License, Version 2.0 the...