My-PoC-Exploits

My-PoC-Exploits PoC-эксплойты, которые я написал. Они предоставляются как есть, и я не буду оказывать поддержку...

research

安全研究 本仓库专门用于记录我所发现的安全漏洞（CVE）。该仓库包含所发现漏洞的详细技术文档、概念验证（PoC）漏洞利用代码与分析。 关于 本仓库汇总了我发现并研究的所有 CVE，包括： 每个漏洞的详细技术分析 用于教育目的的概念验证（PoC）漏洞利用代码 攻击场景与影响评估 修复状态与补丁信息 官方 CVE 记录的相关引用 已发现的 CVE CVE-2026-26158 - BusyBox 硬链接绕过（9.3 严重） CVE-2026-26157 - BusyBox 路径遍历（7.8 高危） 警告 警告： 本仓库中的漏洞利用代码仅供教育与研究目的使用 。...

CVE-2017-5638

CVE-2017-5638 CVE-2017-5638 PoC 익스플로잇...

Vulnerability_PoC

흥미로운 취약점들의 PoC/Exploit 작성자: Numen Cyber Labs 취약점 연구팀 1. TCP/IP RCE 취약점 CVE-2022–34718 PoC 복원 및 분석 https://medium.com/@numencyberlabs/analysis-and-summary-of-tcp-ip-protocol-remote-code-execution-vulnerability-cve-2022-34718-8fcc28538acf 2. CVE-2022–36537 취약점 기술 분석 및 Exploit...

same_type_object_reuse_exploits

PoC 동일 유형/동일 주소 객체 재사용 익스플로잇 Mathias Krause가 개발한 PoC 익스플로잇으로, https://grsecurity.net/exploitinganddefendingagainstsametypeobjectreuse 블로그와 관련이 있습니다...

CVEs

Rhino CVE 개념 증명PoC 익스플로잇 Rhino Security Labs 팀이 다양한 CVE를 대상으로 작성한 개념 증명PoC 익스플로잇 스크립트 모음입니다. CVE-2025-32815: Infoblox NetMRI 하드코딩된 자격 증명을 통한 인증 우회 CVE-2025-32814: Infoblox NetMRI skipjackUsername을 통한 비인증 SQL 주입 CVE-2025-32813: Infoblox NetMRI getsamlrequest 비인증 명령 주입 CVE-2024-55965: 손상된 접근 제어로 'A...

CISA-KEV

CISA-KEV 핵심 요약 이 저장소는 CISA KEV 및 VulnCheck KEV 카탈로그를 자동으로 추적·분석하고, Nuclei 보안 템플릿 및 공개 개념 증명PoC 익스플로잇과 상호 참조합니다. VulnCheck KEV를 통합하면 적용 범위가 1,557개에서 총 4,720개의 고유 CVE 로 확장됩니다 — 3배 증가. 결합된 데이터셋을 보면 모든 KEV 취약점의 36.1%가 Nuclei 템플릿으로 능동 스캔 가능합니다1,702개 CVE. VulnCheck의 확장된 적용 범위는 CISA 공식 목록에는 없는 3,163개의 추...

By-Poloss..-..CVE-2026-9067

POC & Xploit - 개념 증명 디렉토리 WordPress 보안 테스트 환경에서 발견된 취약점에 대한 문서 및 익스플로잇 취약점 목록 CVE ID| 플러그인| 심각도| 유형| 상태 ---|---|---|---|--- CVE-2026-9067| Schema & Structured Data for WP & AMP| 높음 8.1| 무제한 파일 업로드| 문서화됨 CVE-2026-9067 빠른 요약 취약점 설명 Schema & Structured Data for WP & AMP 플러그인 버전 1.60 미만은 파일 업로드를 위한...

WinDriver-EXP

취약한 Windows 드라이버용 PoC 저장소 이 저장소에는 Windows 드라이버의 취약점에 대한 PoC 익스플로잇이 포함되어 있으며, 권한 상승, 임의 코드 실행 또는 기타 보안 위험을 초래할 수 있는 결함을 보여줍니다. 연구 및 교육 목적으로만 제공됩니다. PoC 목록 취약점| CVE ID| 구성 요소 ---|---|--- Windows 커널 권한 상승 취약점| CVE-2024-21338| appid.sys Windows 커널 스트리밍 권한 상승 취약점| CVE-2024-30084| ks.sys Microsoft 스트리밍...

CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities KEV catalog by the U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-38094 CVSS score: 7.2,...

PoC Exploits Do More Good Than Harm: Threatpost Poll

When it comes to the release of proof-of-concept PoC exploits, more security experts agree that the positives outweigh the negatives, according to a recent and informal Threatpost poll. Last week, Threatpost conducted a reader poll and almost 60 percent of 230 security pundits thought it was a...

Threatpost Poll: Are Published PoC Exploits a Good or Bad Idea?

The practice of disclosing proof-of-concept PoC exploits has long caused a debate in the security community. As the name suggests, these outline steps used to exploit a vulnerability in a system to show how it can be done — and are used to test networks and pinpoint vulnerable aspects of a system...

News Wrap: PoC Exploits, Cable Haunt and Joker Malware

This week’s news wrap podcast breaks down the biggest Threatpost security stories of the week, including: Various proof-of-concept exploits being released for serious vulnerabilities this week – including for the recently-patched crypto-spoofing vulnerability found by the National Security Agency...

PoC Exploits Published For Microsoft Crypto Bug

Two proof-of-concept PoC exploits have been publicly released for the recently-patched crypto-spoofing vulnerability found by the National Security Agency and reported to Microsoft. The vulnerability CVE-2020-0601 could enable an attacker to spoof a code-signing certificate necessary for validati...

ShareCMS 0.1 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

QNX Multiple Vulnerabilities

OVERVIEW Independent researcher Luigi Auriemma identified a stack-based buffer overflow and a buffer copy without checking size of input vulnerabilities in QNX’s Phrelay, Phwindows, and Phditto products without coordination with ICS-CERT, the vendor, or any other coordinating entity known to...

WSN Links SQL Injection

'WSN Links' SQL Injection Vulnerability CVE-2010-4006 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injection of various parameters. By assembling portions of SQL code between the...

ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------...

sharecms-sql.txt

============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...