CVE-2024-30270-PoC

This script is designed to exploit vulnerabilities in a Mailcow instance using Cross-Site Scripting XSS and Remote Code Execution RCE. The script aims to: Inject an XSS payload into a Mailcow web interface. Use the XSS payload to execute unauthorized actions. Achieve RCE by overwriting a server...

CVE-2025-27519

Below Privilege Escalation Exploit CVE-2025-27519 This repository contains a proof-of-concept PoC Bash script to exploit the Below privilege escalation vulnerability CVE-2025-27519 on Linux systems. The exploit allows a local user to escalate privileges to root by abusing the way the below binary...

CVE-2023-4590

CVE-2023-4590 PoC of Frhed Free hex editor v1.6.0 - Buffer overflow SEH written by dgndrn Usage Execute exploit.py, copy all string at created payload.txt then use it to as parameter to open Frhed.exe Frhed.exe payload...

Google Cloud MCP Toolbox for Databases 1.4.0 Path Traversal

Google Cloud MCP Toolbox for Databases versions 1.2.0 through 1.4.0 contain a path traversal and missing authorization issue in the cloud-storage source that permits unauthenticated callers to read local files into external buckets or overwrite local files...

Dirty-Pipe

CVE-2022-0847 Dirty Pipe Exploit Affected versions =5.8, 5.16.11, 5.15.25 and 5.10.102 exp.c Use this vulnerability to overwrite read-only files exp-root-shell.c Generate shellcode that executes /bin/sh to overwrite a SUID program owned by root, using passwd as an example. Then run the overwritte...

CVE-2021-4204

CVE-2021-4204 Chinese writeup: https://tr3e.ee/posts/cve-2021-4204-linux-kernel-ebpf-lpe.txt For educational/research purposes only. Use at your own risk. Build & Run $ sh buildandrun.sh Build from source... cc -I include -static -w -o exploit exploit.c Start exploit! This might take some while...

CVE-2016-5195

CVE-2016-5195 my personal POC and EXPLOIT of CVE-2016-5195 dirty COW Usage POC: write files arbitrarily Just a simply POC of this CVE, compile the file poc.c as follow: $ gcc poc.c -o poc -static -lpthread You shall run it as follow: ./poc destinationfile fakefile You shall make sure the...

shakeitoff

shakeitoff A smaller, minimized, and cleaner version of InstallerFileTakeOver aka the zero-day exploit that is a "variation" of CVE-2021-41379 later assigned CVE-2021-43883. This version does not pop a shell like InstallerFileTakeOver. The point of this code was to create a simpler proof of conce...

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass My version - Win10 x64 CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass...

CVE-2025-5548

Breaking FreeFloat FTP: analysis and exploitation of CVE-2025-5548 Anderson Steven — Master in Cybersecurity, Module 6 Vulnerabilities Individual assignment: Methodology for vulnerability analysis and exploitation Why this repository I did not want to simply hand in "here is the exploit working"...

CVE-2026-31309

CVE-2026-31309: Improper Access Control in Mysterium Node before v1.36.0 Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node from v1.21.1-rc0 before v1.36.0 allows an unauthenticated attacker to arbitrarily overwrite the node's configuration and achieve a full node...

CVE-2026-31431-Copy-Fail

CVE-2026-31431: When the Copy Isn’t a Copy and the Failure Comes Too Late Artifacts and scripts for the CopyFail writeup. The deep-dive walkthrough: https://4xura.com/binex/kernel/copy-fail/ Layout proof-of-concept/ contains the primitive-only demos used in the writeup. exploit-scripts/ contains...

BadPfs-CVE-2022-4510

BadPfs Python script that generates pfs payloads to exploit CVE-2022-4510 Simply create a pfs payload using the script. When binwalk is run with -e on the payload, a file can be overwritten with the permission of binwalk. This example will overwrite /etc/sudoers with the contents of ./data when i...

root-dirtyc0w

root-dirtyc0w CVE-2016-5195 DirtyCow root privilege escalation Dirty COW was a race-condition vulnerability in the Linux kernel. This vulnerability lived inside the kernel functions which handle the copy-on-write COW feature of memory mappings and when exploited allowed processes to write to...

CVE-2022-0847-DirtyPipe-Exploit

CVE-2022-0847-DirtyPipe-Exploit What is this This is Max Kellermann's proof of concept for Dirty Pipe, but modified to overwrite root's password field in /etc/passwd and restore after popping a root shell. Side Note: I do not claim any credit for finding this vulnerability or writing the proof of...

CVE-2019-5736

Usage Edit HOST inside payload.c, compile with make. Start nc and run pwn.sh inside the container. Notes This exploit is destructive: it'll overwrite /usr/bin/docker-runc binary on the host with the payload. It'll also overwrite /bin/sh inside the container. Tested only on Debian 9. No attempts...

CVE-2026-37068

CVE-2026-37068 Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allows an authenticated user with the role of super administrator to overwrite any php file in the application via a specially crafted POST request to the affected...

CVE-2026-23745

CVE-2026-23745: node-tar Arbitrary File Overwrite Research: Joshua van Rijswijk Description PoC for CVE-2026-23745 , a high-severity path traversal vulnerability in node-tar 7.5.2. The library fails to sanitize absolute paths in the linkpath field for Hardlinks and Symlinks. This allows malicious...

CVE-2024-37726-MSI-Center-Local-Privilege-Escalation

CVE-2024-37726 MSI Center Local Privilege Escalation - Arbitrary File Overwrite Vulnerability...

CVE-2021-21551

PoC for CVE-2021-21551 Windows LPE using the Dell dbutil23.sys driver. Exploit approach Implement read/write, allocate shellcode, flip page to bypass smep, overwrite haldispatch ptr, execute shellcode...