842017 matches found
CVE-2025-31258-PoC
CVE-2025-31258-PoC 1day practice - Escape sandbox partial using RemoteViewServices...
Android-rce-analizi
CVE Research and PoC Laboratory — Android Security Analysis 👨🏫 Advisor Information Name and Surname| Keyvan Arasteh ---|--- GitHub| @keyvanarasteh E-mail| [email protected] LinkedIn| keyvanarasteh Web Site| qline.tech 👤 Student Information Name and Surname| Baha Furkan Yıldız ---|--- Student...
CVE-2021-25641-Proof-of-Concept
The 0xDABB of Doom - CVE-2021-25641-Proof-of-Concept Apache/Alibaba Dubbo = 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions = 2.7.6 With Different Gadgets Covered in-depth in the article "The 0xDABB of Doom", published on the Checkmarx blog...
DSCourier
DSCourier Description DSCourier is a proof-of-concept that uses the WinGet Configuration COM API to apply DSC configurations through Microsoft-signed binaries. A separate blog post provides the full technical deep dive into the technique. DSCourier was built primarily from a research topic and...
CVE-2020-1350
CVE-2020-1350 SIGRed Denial of Service PoC Exploit This repo has my version of a DoS PoC exploit for the SIGRed vulnerability disclosed by MS and Check Point Research on July 14th, 2020. @maxpl0it also wrote a PoC that he published on July 15th, but I structured my exploit a little differently th...
CVE-2024-6387
OpenSSH CVE-2024-6387 Mitigation Script This repository contains a Python script designed to help network administrators scan and secure SSH configurations against the CVE-2024-6387 vulnerability found in OpenSSH's signal handling mechanism. This vulnerability, if exploited, can allow unauthorize...
CVE-2024-20356
CVE-2024-20356 This is a proof of concept for CVE-2024-20356, a Command Injection vulnerability in Cisco's CIMC. Full technical details can be found at https://labs.nettitude.com/blog/cve-2024-20356-jailbreaking-a-cisco-appliance-to-run-doom Usage Usage: CVE-2024-20356.py -h -t HOST -u USERNAME -...
Apache-Struts-Shodan-Exploit
APACHE STRUTS SHODAN EXPLOIT POC Author: @037 Original code can be found here. This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers. Shodan search parameter has been left out to weed out any skids trying to use this...
tools
About This section offers a selection of our fully featured security and hacking tools. We also provide some exploits, proof of concept code, shellcodes and snippets. That means some tools are not tested and may not have the feature set. If you find some bugs or if you have any questions, ideas o...
fortios-auth-bypass-poc-CVE-2024-55591
CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Proof of Concept See our blog post for technical details Detection in Action python CVE-2024-55591-PoC.py --host 192.168.1.5 --port 443 --command "get system status" --user watchTowr --ssl / | | |\ \ \ / / \ \ / | | \| | / \ / / \ \ \ /...
WebKit-UAF-ANGLE-OOB-Analysis
WebKit-UAF-ANGLE-OOB-Analysis CVE-2025-43529, CVE-2025-14174 Notes and PoC material for a WebKit/ANGLE chain on iOS 26.1. This is not a full exploit; it separates verified primitives from the pieces that still fail. Author: zeroxjf Based on: jir4vv1t's CVE-2025-43529 exploit Status: Partial chain...
CVE-2022-27925-PoC
CVE-2022-27925-PoC Zimbra RCE simple poc...
IngressNightmare-POCs
IngressNightmare-POCs CVE-2025-24513: https://github.com/kubernetes/kubernetes/issues/131005 CVE-2025-24514: https://github.com/kubernetes/kubernetes/issues/131006 CVE-2025-1097: https://github.com/kubernetes/kubernetes/issues/131007 CVE-2025-1098:...
CVE-2023-23752
CVE-2023-23752 This is a proof-of-concept code for the CVE-2023-23752 vulnerability. It allows an attacker to extract sensitive information such as usernames, passwords, and database names from a target application. Usage To use this code, you can follow these steps: 1. Clone this repository or...
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...
threat-team
Google Threat Intelligence Group Notice: This repository is no longer maintained. For the latest Indicators of Compromise IOCs and threat research, please refer to the Google Cloud Threat Intelligence blog and free Google Threat Intelligence / VirusTotal collections. This repository contains...
IsolatedAnarchy-Public
How to run the exploit Start a server using python3 srver.py, apply a renderer.patch to chromium/src at commit hash 112f665d98a2fe84b156c74fbea2aed742f16c15. Run the patched chrome version with --enable-blink-features=MojoJS and navigate to localhost:3020. Make sure to have host.localhost support...
CVE-2021-42205
CVE-2021-42205 ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice. authentication| complexity| vector ---|---|--- not...
cve-2023-36802
PoC for CVE-2023-36802 Exploit targeting MSKSSRV.SYS driver. The complete exploit works on vulnerable Windows 11 & 10 systems. Note If you have any cool tricks & tips that will make this exploit better I'm open to any suggestions : Credits Valentina Palmiotti @chompie1337 from IBM X Force Google'...