CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume

CVE-2026-5555 – Container Escape via /proc/self/fd Symlink Overview A shared volume mounted with rshared propagation allows a malicious container to create a symbolic link pointing to a host file through /proc/self/fd. The host process writing to the volume follows the symlink, overwriting critic...

EUVD-2026-110603

Psono Server CE & EE versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An authenticated remote attacker with read-only access to a file could present a download transfer to the upload endpoint, obtain a signed upload URL for an...

CVE-2025-65018_Exploit_Challenge

CVE-2025-65018 CTF Challenge: "PNG Panic" This challenge is based on a real-world buffer overflow vulnerability in libpng specifically dealing with the simplified API pngimagefinishread when handling 16-bit interlaced images. 🚩 Challenge Goal You are provided with a vulnerable binary victim that...

CVE-2026-34213

CVE-2026-34213 A low-privileged Docmost user could supply a victim attachmentId to the generic upload endpoint and overwrite another page's stored attachment inside the same workspace. Intro I identified, responsibly disclosed, and reproduced a High-severity authorization flaw in Docmost , the...

CVE-2026-54337-PoC

CVE-2026-54337 PoC CVE-2026-54337 - Unauthenticated File Write/Overwrite in fireshare test.mp4 Step 2 : Run the following curl command make sure to change the placeholder $ curl -s -w "HTTP %httpcode\n" \ -F "file=@;filename= -selectstreams v.mp4" \ -F "folder=testfolder -o " ...

CVE-2025-5548

⚡ CVE-2025-5548: Vulnerability Research & Exploitation This repository provides a technical analysis and proof-of-concept walkthrough for CVE-2025-5548. This research covers the complete lifecycle of the vulnerability, from initial binary inspection to successful exploitation. ⚠️ Legal & Ethical...

dinkleberry

Dinkleberry 🫐 Are you one of the 92,000+ people1 stuck with a D-Link NAS vulnerable to CVE-2024-3272, and no patch in sight? This tool uses the exploit itself to patch a vulnerable device. 1: See original disclosure in refs What it does Dinkleberry will execute a command to swap out the vulnerabl...

CVE-2022-40684

Description Exploit for CVE-2022-40684 authentication bypass vulnerability affecting FortiOS, FortiProxy and FortiSwitchManager appliances. Disclaimer This tool is intended for demonstration purposes, only use against systems where you have explicit authorization. Project maintainer is not...

CVE-2026-11784-Optimole-CSRF

CVE-2026-11784: CSRF to Arbitrary File Overwrite in Optimole WordPress Plugin Summary A Cross-Site Request Forgery CSRF vulnerability in the Optimole plugin for WordPress versions = 4.2.5 allows unauthenticated attackers to silently overwrite existing media library assets via the...

CVE-2020-11108-PoC

CVE-2020-11108-PoC Two PoCs are in this repo. cve-2020-11108-rce.py will give you a shell as the www-data user. root-cve-2020-11108-rce.py will give you a shell and escalate privileges to root. Note: This is destructive as we must overwrite teleporter.php. For a full explanation/writeup please se...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2025-81110-PoC

CVE-2025-81110-PoC Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. This repository contains a professional-grade exploit for a critical vulnerability in Gogs versions prior to 0.13.0. The exploit leverages a logical flaw where the Gogs API fails to...

WDBFontOverwrite

Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689. Works on iOS 16.1.2 and below tested on iOS 16.1 on unjailbroken devices. IPA available in the Releases section. Fonts included: DejaVu Sans Condensed DejaVu Serif DejaVu Sans Mono Go Regular Go Mono Fira Sans Segoe UI Comic San...

CVE-2023-50965

💥 CVE-2023-50965 — Stack Buffer Overflow Exploit Linux Proof of Concept exploit for CVE-2023-50965 , demonstrating a stack-based buffer overflow leading to Remote Code Execution RCE on vulnerable systems without exploit mitigations enabled. This project was developed for security research and...

CVE-2026-56782-Gorse-Auth-Bypass

CVE-2026-56782 — Gorse Unauthenticated Database Dump / Restore Auth Bypass Gorse everyone is admin if request.Header.Get"X-API-Key" == m.Config.Master.AdminAPIKey return true return false func m Master dumpresponse http.ResponseWriter, request http.Request if !m.checkAdminrequest writeErrorre...

Linux-Kernel-Dirty-Pipe-Exploitation-Logic-Bug-

Linux Kernel Dirty Pipe Exploitation Logic Bug by: Antonius w1sdom https://www.bluedragonsec.com https://github.com/bluedragonsecurity Dirty Pipe CVE-2022-0847 is one of the most significant security vulnerabilities in Linux Kernel 5.8 – 5.15.24, discovered by Max Kellermann in 2022. This...

K50G-POCOF4GT-CVE-2026-43499-PoC

Redmi K50 Gaming ingres — CVE-2026-43499 GhostLock Temporary Root PoC One-click temporary Root without unlocking BL. Uses the GhostLock CVE-2026-43499, futex PI Use-After-Free local privilege escalation chain to obtain a root anchor, then mounts the kernelsu module into the running kernel via...

Copy-Fail-Exploit-CVE-2026-31431

Copy Fail CVE-2026-31431 – Exploit Usage Guide ⚠️ Disclaimer This content is for educational and authorized security testing purposes only. Do NOT run this on systems without explicit permission. 📌 Overview Copy Fail CVE-2026-31431 is a Linux Local Privilege Escalation LPE vulnerability affecting...

CVE-2024-37726-MSI-Center-Local-Privilege-Escalation

CVE-2024-37726 MSI Center Local Privilege Escalation - Arbitrary File Overwrite Vulnerability Vulnerability Summary A local privilege escalation vulnerability on Windows OS has been identified in MSI Center versions = 2.0.36.0, which allows a low-privileged user to arbitrarily overwrite or delete...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...