18542 matches found
Concrete Security Bounds for Simulation-Based Proofs of Multi-Party Computation Protocols
The concrete security paradigm aims to give precise bounds on the probability that an adversary can subvert a cryptographic mechanism. This is in contrast to asymptotic security, where the probability of subversion may be eventually small, but large enough in practice to be insecure. Fully...
CVE-2001-1473
creationtimestamp| type| source ---|---|--- 2025-07-29 21:00:04+00:00| published-proof-of-concept| Telegram/ujDzFFrET3ZH5xQdQMIqDWCAd6Ask0YbS48UdaKK1nCHgf0...
GHSA-JGMV-J7WW-JX2X Koa Open Redirect via Referrer Header (User-Controlled)
Summary In the latest version of Koa, the back method used for redirect operations adopts an insecure implementation, which uses the user-controllable referrer header as the redirect target. Details on the API document https://www.koajs.net/api/responseresponseredirecturl-alt, we can see:...
CVE-2025-50866
creationtimestamp| type| source ---|---|--- 2025-07-28 21:00:05+00:00| published-proof-of-concept| Telegram/yClP7ID2sv33ZU8LKP82OuDHMHI-3r8bUmurim2SHQMJTmY...
GHSA-VR59-GM53-V7CQ
creationtimestamp| type| source ---|---|--- 2025-07-28 20:53:07+00:00| published-proof-of-concept| https://t.me/cybersecplayground/274...
Exploit for CVE-2025-8191
CVE-2025-8191 – Swagger UI XSS Injection Description :...
CVE-2025-54590
creationtimestamp| type| source ---|---|--- 2025-07-27 17:38:06+00:00| published-proof-of-concept| https://github.com/silverbucket/webfinger.js/security/advisories/GHSA-8xq3-w9fx-74rv...
MS17-010
This repository is for public analysis of the MS17-010 vulnerability. The repository contains various PoCs Proof of Concept and exploits for the vulnerability, which affects the Windows SMB protocol. The vulnerability is a buffer overflow in the SMB protocol, allowing an attacker to execute...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
CVE-2020-0796 PoC aka CoronaBlue aka SMBGhost Usage ./CVE-2020-0796.py servername This script connects to the target host, and compresses the authentication request with a bad offset field set in the transformation header, causing the decompressor to buffer overflow and crash the target. This...
Exploit for OS Command Injection in Gnu Bash
Exploits Miscellaneous proof of concept exploit code written at Xiphos Research for testing purposes. Current Exploits index may be out of date phpMoAdmin Remote Code Execution CVE-2015-2208 LotusCMS Remote Code Execution OSVDB-75095 ElasticSearch Remote Code Execution CVE-2015-1427 ShellShock...
IOHIDeous
IOHIDeous A macOS kernel exploit based on an IOHIDFamily 0day. Write-up here. Notice The prefetch timing attack I'm using for hid for some reason doesn't work on High Sierra 10.13.2 anymore, and I don't feel like investigating that. Maybe patched, maybe just the consequence of a random change, I...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android
This repository contains a PoC Proof of Concept code for the BlueBorne vulnerabilities. The BlueBorne vulnerabilities are a set of vulnerabilities in Bluetooth devices that allow an attacker to remotely execute code on a device. The PoC code is written in Python and uses the PyBluez library to...
Exploit for CVE-2020-0609
BlueGate Proof of Concept Denial of Service + scanner for CVE-2020-0609 and CVE-2020-0610. These vulnerabilities allows an unauthenticated attacker to gain remote code execution with highest privileges via RD Gateway for RDP. Please use for research and educational purpose only. Usage Make sure y...
CVE-2025-8220
creationtimestamp| type| source ---|---|--- 2025-07-27 03:00:05+00:00| published-proof-of-concept| Telegram/cFf3nf01Jtskw4JUcMDQ8X2aYFQSVN6Id1bXBoqDA3vOsA 2025-07-27 11:00:09+00:00| published-proof-of-concept| Telegram/AfTJKcZEqQRiwkgCxUS4ELJ1Qe5RhSl-9xmB44se0uu3--o...
Trivial Trojans: How Minimal MCP Servers Enable Cross-Tool Exfiltration of Sensitive Data
The Model Context Protocol MCP represents a significant advancement in AI-tool integration, enabling seamless communication between AI agents and external services. However, this connectivity introduces novel attack vectors that remain largely unexplored. This paper demonstrates how unsophisticat...
Exploit for CVE-2025-54782
CVE-2025-54782 RCE POC Read more: - https:...
Exploit for CVE-2025-32429
CVE-2025-32429 XWiki SQL Injection PoC Author: Byte Reape...
CVE-2025-54413
creationtimestamp| type| source ---|---|--- 2025-07-25 16:59:07+00:00| published-proof-of-concept| https://github.com/skops-dev/skops/security/advisories/GHSA-4v6w-xpmh-gfgp...