CVE-2026-81445

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-81627

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-31650

TomcatKiller - CVE-2025-31650 🚨 Prueba de concepto PoC para la vulnerabilidad DoS en HTTP/2 de Apache Tomcat CVE-2025-31650 Este script provoca una condición de agotamiento de memoria en Apache Tomcat enviando cabeceras priority malformadas a través de HTTP/2. 🎯 Versiones afectadas Apache Tomcat...

scagoat

SCA Goat Navigating SCA Vulnerabilities, Empowering Mastery...

poc-ghas-vulnerability-report-generator

GHAS Vulnerability Report Generator !WARNING This proof...

CVE-2026-42533

CVE-2026-42533 — Exploit PoC de desbordamiento de búfer en el montón de nginx Ejecución remota de código sin autenticación mediante la corrupción de capturas en dos pasadas PoC público liberado el 2026-07-27 — No esperes, aplica el parche ahora. | ---|--- CVE| CVE-2026-42533 CVSS 4.0| 9.2 Crítico...

ItWasAllADream

这一切都是梦 一个 CVE-2021-34527（又名 PrintNightmare）Python 扫描器。允许你扫描整个子网中的 PrintNightmare RCE（不是 LPE ）并生成包含结果的 CSV 报告。通过 MS-PAR 和 MS-RPRN 测试可利用性。 该工具包含“去毒版”的 Python 漏洞利用代码，它实际上并 不 利用主机，而是使用与漏洞利用相同的易受攻击的 RPC 调用来判断主机是否易受攻击。 2021年7月7日更新：该工具还会使用@gentilkiwi 发现的 UNC 绕过 检查主机是否易受攻击。 为什么？ 观点：试图确定某物是否对 PrintNightma...

ysoserial

ysoserial A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. Description Originally released as part of AppSecCali 2015 Talk "Marshalling Pickles: how deserializing objects will ruin your day" with gadget chains for Apache Commons Collections 3.x and...

teamcity-exploit-cve-2023-42793

TeamCity Exploit Cve 2023 42793 一个快速利用 cve-2023-42793 漏洞的脚本。关于该漏洞的更多信息可参见： https://www.fortinet.com/blog/threat-research/teamcity-intrusion-saga-apt29-suspected-exploiting-cve-2023-42793​ https://www.cnblogs.com/LittleHann/p/17843271.html​ 该脚本增加了在触发 RCE 漏洞后自由使用 "params" 执行命令的能力：...

CVE

Repositorio de Exploits de Prueba de Concepto Este repositorio contiene mi colección personal de exploits de prueba de concepto PoC creados con fines de pruebas de seguridad e investigación. Cada carpeta está organizada por identificador de CVE por ejemplo: CVE-2025-XXXX/, y en su interior...

CVE-2024-31317-PoC-Deployer

CVE-2024-31317-PoC-Deployer A deployment tool for CVE-2024-31317 proof-of-concept exploit targeting Android 9 through 13 devices. 📝 项目描述 CVE-2024-31317-PoC-Deployer 是一个自动化部署脚本，用于快速生成和配置 CVE-2024-31317 漏洞利用所需的全部文件。该漏洞影响 Android 9 到 13 的设备，允许通过 Zygote 进程实现权限提升并执行任意代码。 🚨 漏洞信息 CVE ID : CVE-2024-31317...

CVE-2026-21019-Kubernetes-CronJob-Suspended-Execution-via-Time-Manipulation

CVE-2026-21019 – Ejecución suspendida de Kubernetes CronJob mediante manipulación del tiempo Código del programa YAML + exploit en Python root@kitploit: cronjobvuln.yaml - CronJob that checks current time without external validation apiVersion: batch/v1 kind: CronJob metadata: name: backup spec:...

iblessing

☠️ ██╗██████╗ ██╗ ███████╗███████╗███████╗██╗███╗ ██╗ ██████╗ ██║██╔══██╗██║ ██╔════╝██╔════╝██╔════╝██║████╗ ██║██╔════╝ ██║██████╔╝██║ █████╗ ███████╗███████╗██║██╔██╗ ██║██║ ███╗ ██║██╔══██╗██║ ██╔══╝ ╚════██║╚════██║██║██║╚██╗██║██║ ██║ ██║██████╔╝███████╗███████╗███████║███████║██║██║...

Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow

Escalamiento de Privilegios con Dirty Cow CVE-2016-5195 Autor: Samuel García Academia: 4Geeks Academy Fecha: 25/06/2025 Descripción Dirty COW es una vulnerabilidad crítica del kernel Linux ≤ 4.8.3 que permite a un atacante local modificar archivos de solo lectura mediante una condición de carrera...

CVE-2018-6961

CVE-2018-6961 - VULNERABILIDAD DE INYECCIÓN DE COMANDOS NO AUTENTICADA Este exploit funciona en Python2.7 - No probado en ninguna otra versión 1 Instalar dependencias root@kitploit: pip install request si no tienes pip instalado, simplemente ejecuta root@kitploit: apt-get install python-pip 2 Uso...

CVE-2026-92944

vm2 versions 3.10.2 through 3.11.6 contain a sandbox escape vulnerability on Node.js 26 where Promise.prototype.finally bypasses vm2's wrapper protections due to a stale PromiseThenLookupChain protector in V8 14.6. Attackers can exploit this by creating an async function that returns a Promise wi...

CVE-2026-92934

vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError objects are caught within a single exception handler traversal. Attackers can exploit cycle detection bypass in handleException to access unsanitized hos...

CVE-2026-81442

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access...

CVE-2026-81443

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery SSRF vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...

CVE-2026-81453

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for...