19980 matches found
Exploit for CVE-2023-1234
It is an offensive tool for SSH exploitation. The repository contains a proof of concept PoC exploit for CVE-2023-1234, which targets vulnerable proxycommand configurations on SSH clients. The target product/service is OpenBSD's SSH, and the vulnerability class/vector is remote command execution...
Exploit for CVE-2025-6934
CVE-2025-6934 – WordPress Opal Estate Pro Exploit 📖 Desc...
Exploit for Double Free in Microsoft
CVE-2025-49667 — Win32k Privilege Escalation Exploit !Explo...
0day-buffer-overflow-in-exiv2
PoC and patch for heap-buffer-overflow in PngChunk::readRawProf...
Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver
The SUPERGROUP known as Scattered Lapsus$ Hunters - A combin...
CVE-2025-50461
creationtimestamp| type| source ---|---|--- 2025-08-15 06:38:27+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/47775 2025-08-15 08:13:12+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/47783 2025-08-15 09:00:04+00:00| published-proof-of-concept|...
Exploit for Injection in Cisco Secure_Firewall_Management_Center
cve2025-20265 Safe Python script to detect Cisco FMC instances...
CVE-2025-50740
creationtimestamp| type| source ---|---|--- 2025-08-14 21:26:09+00:00| published-proof-of-concept| Telegram/guRgvT7EMFw6a7wzD8CHWW7A1OiZpY5IGHJHSa3ooaapPbg...
Exploit for CVE-2020-11989
使用说明 首页 所见即所得，点击对应的按钮会跳转到相应的模块 渗透测试 网站扫描 网站扫描功能缝了afrog项目地址，基本就是差不多把该扫描器的功能UI化，且内置反连无需再配置ceye或jndi已将jndi有关poc全部替换成反连地址，主动探测的漏洞或者指纹会写入到report目录下的html文件中，并没有将afrog命令的输出进行删除（所以你在go run main.go运行工具时，依然能看到命令行存在afrog的输出内容） 目标格式支持 URL 或者 IP:PORT 仅指纹扫描/指纹POC扫描/主动指纹探测 - 仅指纹扫描：只对当前网页发送两个数据包进行探测指纹 - 主动指纹探测：...
Exploit for Path Traversal in Rarlab Winrar
CVE-2025-8088 WinRAR Proof of Concept PoC-Exploit !PoCht...
CVE-2025-47533
creationtimestamp| type| source ---|---|--- 2025-08-13 01:27:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/47515 2025-08-13 04:42:58+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/47533...
CVE-2025-52216
creationtimestamp| type| source ---|---|--- 2025-08-12 21:00:04+00:00| published-proof-of-concept| Telegram/lGYbLck6G7m7DaRiRxfjxEzwq5qsYzU-Axb6YLGnEcc6ewQ...
svg-sanitizer Bypasses Attribute Sanitization
Problem The sanitization logic at https://github.com/darylldoyle/svg-sanitizer/blob/0.21.0/src/Sanitizer.phpL454-L481 only searches for lower-case attribute names e.g. xlink:href instead of xlink:HrEf, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripting...
GHSA-22WQ-Q86M-83FH svg-sanitizer Bypasses Attribute Sanitization
Problem The sanitization logic at https://github.com/darylldoyle/svg-sanitizer/blob/0.21.0/src/Sanitizer.phpL454-L481 only searches for lower-case attribute names e.g. xlink:href instead of xlink:HrEf, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripting...
Exploit for CVE-2024-47533
CVE-2024-47533 – Cobbler XMLRPC Authentication Bypass → Revers...
Exploit for Path Traversal in Rarlab Winrar
WinRAR-CVE-2025-8088-PoC-RAR WinRAR 0day CVE-2025-8088 PoC RA...
Exploit for Deserialization of Untrusted Data in Microsoft
🚀 SharePoint CVE-2025-53770 RCE Vulnerability Checker !Licen...
GHSA-JHMR-57CJ-Q6G9 Komari vulnerable to 2FA Authentication Bypass
Summary Logic error in 2FA verification condition allows bypass of two-factor authentication Details https://github.com/komari-monitor/komari/blob/bd5a6934e1b79a12cf1e6a9bba5372d0e04f3abc/api/login.goL55 There is no way for Verify2Fa to return an error AND true as ok at the same time, any codes a...
PT-2025-32883
Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 7.0 through 7.6 Fortinet FortiWeb versions 7.6.3 and below Fortinet FortiWeb versions 7.4.7 and below Fortinet FortiWeb versions 7.2.10 and below Fortinet FortiWeb versions 7.0.10 and below Description An improper...