CVE-2020-15368

How to exploit a vulnerable windows driver Exploit and Proof of Concept PoC for CVE-2020-15368. Asrock repackaged rweverything driver for their RGB controller configuration tool and signed it. They "protect" it by encrypting their ioctls...lol. We found this CVE by accident last summer, and afaik...

cve-2019-1003000-jenkins-rce-poc

PoC: Jenkins RCE SECURITY-1266 / CVE-2019-1003000 Script Security, CVE-2019-1003001 Pipeline: Groovy, CVE-2019-1003002 Pipeline: Declarative A proof of concept to allow users with Overall/Read permission and Job/Configure and optional Job/Build to bypass the sandbox protection and execute arbitra...

CVE-2024-52806-PoC

POC for CVE-2024-52596 / CVE-2024-52806 - SimpleSAMLphp pre-auth XXE file read...

CVE-2026-39363

CVE-2026-39363 — Vite Dev Server Arbitrary File Read PoC A drop-in PoC for GHSA-p9ff-h696-f583. It reads arbitrary files from the machine running the dev server by calling fetchModule over an unauthenticated HMR WebSocket, bypassing the HTTP-layer server.fs.allow restriction. Affected Versions...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

CVE-2023-26360-adobe-coldfusion-rce-exploit

Critical vulnerabilities in Adobe Coldfusion CVE-2023-26359, CVE-2023-26360 and CVE-2023-26359 On March 8, 2023, Adobe released security updates to address critical vulnerabilities in Adobe ColdFusion, a popular web application development platform. These vulnerabilities, classified as improper...

CVE-2024-23897

CVE-2024-23897 This repository presents a proof-of-concept of CVE-2024-23897 Discovered by sonarsource CVE-2024-23897 | File read in jenkins Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on confluence instances they don't own. This tool has been...

CVE-2023-40028

CVE-2023-40028 POC for CVE-2023-40028: Ghost CMS Arbitrary File Read Description Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an...

qt6-qt5compat security update

An update is available for qt6-qt5compat. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt6 - Qt 5 Compatibility Libraries. Security Fixes: qt: Qt: Denial of...

Meltdown

Meltdown PoC for Meltdown in linux CVE-2017-5754 Useage root@kitploit: cd meltdown make ./meltdown address size Example Refer http://zzado.tistory.com/category/Report...

weasyprint Has Server-Side Request Forgery (SSRF)

Summary urlfetcher is WeasyPrint's documented mechanism for restricting resource loading - applications use it to block file://, internal hosts, etc. when rendering untrusted input. Two writepdf channels ignore the document's urlfetcher and build a fresh default URLFetcher instead. A restrictive...

GHSA-JF6Q-CHMF-3H3V weasyprint Has Server-Side Request Forgery (SSRF)

Summary urlfetcher is WeasyPrint's documented mechanism for restricting resource loading - applications use it to block file://, internal hosts, etc. when rendering untrusted input. Two writepdf channels ignore the document's urlfetcher and build a fresh default URLFetcher instead. A restrictive...

dirtypipez-exploit

CVE-2022-0847 DirtyPipe Exploit. Credit: Max Kellermann [email protected] A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe'...

CVE-2026-65343

CVE-2026-65343 — AppleKeyStore OOB Read KASLR Defeat Component: AppleKeyStore kernel extension — LibSerSEPControlDeserialize Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds read in SEP control message deserialization Impact: Kernel pointer lea...

Grafana-CVE-2021-43798

CVE-2021-43798 Grafana Unauthorized arbitrary file reading vulnerability 8.3.1 2021-12-07 Security: Fixes CVE-2021-43798 . For more information, see our blog https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/ Example: get db password...

CVE-2024-26160

CVE-2024-26160 cldflt.sys information disclosure vulnerability There's small writeup about CVE-2024-26160 , what can be found in the February patch KB5034765 , Windows 11 22H2, Windows 11 23H2. The vulnerability has been closed in the March patch KB5035853. Analysis The vulnerability is located i...

CVE-2022-45451

Introduction System Specs: Windows 10 1809 x64 EN Target: Acronis Home Cyber Protect Acronis Cyber Protect Vulnerability Description The Acronis "ngscan" anti-malware scan driver suffers from incorrect / improper access control placed on the filter communication port. The minifilter driver suppor...

CVE-2020-1938-MSF-MODULE

CVE-2020-1938-MSF-MODULE Modified version of auxiliary/admin/http/tomcatghostcat, Read any file Overwrite the file/metasploit-framework/modules/auxiliary/admin/http/tomcatghostcat.rb and restart msfconsole to execute reloadall. Then you can use the module...

CVE-2026-3576

CVE-2026-3576 - Wordpress Plugin Planyo Online Reservation System = 3.0 - Arbitrary File Read via SSRF This repo contains a python based Proof of ConceptPoC exploit for CVE-2026-3576. It can also be found in Exploit-DB here. I have also developed a Metasploit module for this exploit which can be...

CVE-2024-23897

CVE-2024-23897 Jenkins CI Authenticated Arbitrary File Read Through the CLI Leads to Remote Code Execution RCE Jenkins is a self-contained open source continuous integration/continuous delivery and deployment CI/CD automation software DevOps tool written in the Java programming language. It is us...