43795 matches found
CVE-2023-21768
CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: WindowsAFDLPECVE-2023-21768.exe where is the process ID in decimal of the...
CVE-2026-109413 Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process
In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure recursed through lexInlineMapping and lexInlineSequence for every and of an inline collection, without entering the nesting level that the rest of the parser bounds with maxNestingLevel. A documen...
CVE-2026-79843 HPE NonStop SQL/MX EXE - out-of-bounds read vulnerability
A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termination, CPU halt, or data corruption...
CVE-2026-79843
The HPE NonStop SQL/MX EXE component is affected by an out-of-bounds read vulnerability (CWE-125) caused by processing a corrupted file . This flaw can lead to information disclosure, process termination, CPU halt, or data corruption. The vulnerability affects product version T1051L40 and earlier...
CVE-2023-36319
CVE-2023-36319 By modifying the compression plug-in command, the attacker can cause the server to execute arbitrary commands during the upload process. Only used for authorized security testing, please do not use it for illegal purposes. Violations have nothing to do with the author. Affected...
CVE-2022-1227_Exploit
CVE-2022-1227Exploit A script for exploiting CVE-2022-1227. Background Ubuntu 20.10 is recommanded. Podman TODO: add what is the principle of this vulnerability Install podman Follow the instruction in the official document: https://podman.io/getting-started/installationinstalling-on-linux For...
bat
Behavioral Adversary Tracer BAT BAT is a realistic, evolving adversary threat model for Linux and Windows. It is not a C2 framework and it is not a rootkit. It is a complete threat simulation platform that integrates C2 communication, kernel-level stealth rootkit modules, userspace evasion,...
CVE-2025-2783
Chromium CVE-2025-2783: Sandbox Escape & Full-Chain RCE Exploit This repository contains a full-chain exploit implementation for CVE-2025-2783. The vulnerability resides in Chromium's Ipcz communication layer, allowing an attacker to achieve sandbox escape and arbitrary code execution from a...
CVE-2022-30190-ASR-Senintel-Process-Pickup
This repository does not have a README...
CVE-2023-21554-PoC
CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC, analysis at https://www.zoemurmure.top/posts/cve202321554/ Before executing the PoC file, modify the target machine IP address manually. The sign of a successful PoC is the crash of the mqsvc.exe process. There is no pop-up information...
CVE-2026-79837
A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior...
ssbd-tools
Tools for exercising Speculative Store Bypass Disable The ssbd-tools project is a collection of programs that makes use of the Speculative Store Bypass Disable SSBD functionality provided in x86 processors. SSBD is a processor based mitigation for the Speculative Store Bypass attack that is...
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a...
cortex
CORTEX v1.0.0 - INSTALLATION AND QUICK START Cortex v1.0.0 ships as a single portable Windows application: cortex.exe. The x64 and x86 instrumentation runtimes live in the runtime folder and are selected automatically for each target. Nothing else has to be installed no Qt, no Visual C++ runtime...
EUVD-2026-102024
A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior...
CVE-2026-79837 HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability
A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior...
CVE-2026-23744-POC
CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE MCPJam Inspector -i -p -m Flag| Description| Default ---|---|--- -u| Target URL| required -i| Your listener IP LHOST| required -p| Your listener port LPORT| required -m| Payload method: busybox, bash, python3| busybox Reverse Shell Example Ste...
cve-2026-23744
CVE-2026-23744 – MCPJam Inspector Unauthenticated Remote Code Execution RCE Description Product : MCPJam Inspector Affected versions : ≤ 1.4.2 Fixed version : 1.4.3 Type : Unauthenticated Remote Code Execution RCE Attack vector : Network Authentication required : No User interaction required : No...
linux-privilege-escalation
Linux Privilege Escalation Bash script to check and exploit the CVE-2022-0847 Linux "Dirty Pipe" vulnerability About this Proof of Concept This script allows an unprivileged user on a vulnerable system to do the following: Modify/overwrite read-only files like /etc/passwd. Obtain an elevated shel...