poc_cve-2026-42208

CVE-2026-42208 — LiteLLM Pre-Authentication SQL Injection A lab environment for reproducing and detecting CVE-2026-42208 , a critical pre-authentication SQL injection vulnerability in LiteLLM where unsanitized Bearer tokens reach a raw PostgreSQL query. Vulnerability Overview Field| Details ---|-...

CVE-2025-55182-React2Shell-Lab

CyberSec Blog CTF - React2Shell PoC This repository provides a vulnerable CTF Capture The Flag environment based on a cybersecurity blog using Next.js and React Server Components. CVE-2025-55182 : Pre-authentication Remote Code Execution RCE vulnerability in React Server Components versions 19.0....

Windows-2

Windows-2 BlueKeep Vulnerable Lab - CVE-2019-0708 1. Overview This repository contains a deliberately vulnerable Windows lab designed to demonstrate the BlueKeep vulnerability affecting the Remote Desktop Protocol RDP service. BlueKeep is a critical pre-authentication Remote Code Execution RCE...

CVE-2025-55349

CVE-2025-55349 — pm2 Arbitrary Code Execution via postinstall Discoverer : Golden Ticket Labs Vendor : Unitech pm2 Date Assigned : August 20, 2025 MITRE Description An issue in the lib/API/Modules/NPM.js component of Unitech PM2 v5.4.2 allows arbitrary code execution by installing packages with...

CVE-2026-42978-PoC-Research

CVE-2026-42978 PoC & Research — Windows Push Notifications Use-After-Free Race condition in Windows Push Notifications service WpnService that runs as NT AUTHORITY\SYSTEM. An attacker with local access can trigger a use-after-free during platform shutdown and potentially elevate privileges. CVE:...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

http-vuln-cve2020-3452.nse

http-vuln-cve2020-3452.nse CVE-2020-3452 : Cisco ASA and FTD Unauthorized Remote File Reading Nmap NSE Script...

Lock-Picking-Robot

🔑 Unlocked 🔑 Introduction Background An open source Lock picking robot. Basically, there are many skeleton keys in use the most common example is the TSA 007, which is bad. Having one key which can open MANY different locks, especially without the lock owners people knowing it exists or can be...

CVE-2024-53900

CTF Challenge - Mongoose RCE CVE-2024-53900 Challenge Overview This Capture The Flag CTF challenge is based on CVE-2024-53900, a vulnerability in Mongoose that allows Remote Code Execution RCE due to improper use of the $where operator in MongoDB queries. Your objective is to exploit this...

libsigrok

README The sigrok project aims at creating a portable, cross-platform, Free/Libre/Open-Source signal analysis software suite that supports various device types such as logic analyzers, oscilloscopes, multimeters, and more. libsigrok is a shared library written in C which provides the basic API fo...

CVE-2021-21110

CVE-2021-21110 CVE-2021-21110 : Tiki Wiki CMS GroupWare Serverside Template Injection Remote Code Execution Exploit...

CVE-2019-5736-Custom-Runtime

CVE-2019-5736-Custom-Sandbox General CVE-2019-5736 implemented using a shallow, self-written container runtime to understand the exploit. Exploit is based on and almost all copied from the runc-poc by twistlock: https://github.com/twistlock/RunC-CVE-2019-5736/tree/master/maliciousimagePOC Contain...

TangledWinExec

Tangled WinExec This repository is for investigation of Windows process execution techniques. Most of PoCs are given a name corresponding to the technique. Projects BlockingDLL : This toolset is for testing blocking DLL process. See README.md. CloneProcess : This directory is for process forking...

columba

Columba Columba is a simple messaging and voice app for the Reticulum network on Android. Send LXMF messages and make LXST voice calls without relying on the internet, cell towers, or any central servers. Built with a native Android interface and Material Design 3, Columba brings mesh networking ...

kernel-exploits

Linux kernel exploits Date| Link| Description| Vector| Impact ---|---|---|---|--- 02.2016| CVE-2016-2384| Double-free in USB MIDI driver| USB + Local| LPE 03.2016| prefetch-side-channel| KASLR bypass via prefetch| Local| Info-leak 12.2016| CVE-2016-9793| Signedness issue with socket buffers| Loca...

OHTS

OHTS CVE-2017-8759 | .NET Framework Remote Code Execution Vulnerability 1. Introduction A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE. POST /mgmt/tm/util/bash HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Connection: close, X-F5-Auth-Token, X-Forwarded-For, Local-Ip-From-Httpd, X-F5-New-Authtok-Reqd, X-Forwarded-Server, X-Forwarded-Host Content-type:...

redis-cve-2025-62507

Exploit Scripts — CVE-2025-62507 Directory Structure scripts/ ├── exploitx86.py x86-64 ROP exploit ├── exploitarm64.py ARM64 AArch64 ROP exploit └── gdbwithsymbols.sh GDB debugging helper script Vulnerability Summary Item| Description ---|--- CVE| CVE-2025-62507 Vulnerability Type| Stack Buffer...

EvilSunCheck

EvilSun Vulnerability Checker CVE-2020-14871 This is a little Python script to detect the "EvilSun" vulnerability CVE-2020-14871 on Solaris systems. The vulnerability is a buffer overflow in the Pluggable Authentication Module PAM pamunixauth when handling keyboard-interactive authentication in...

CVE-2023-29929

CVE-2023-29929: Remote "Instakill" DoS in Kemp LoadMaster via DNS Packet Kemp LoadMaster devices firmware 7.2.60 suffer from a critical buffer overflow vulnerability in the isreverse and locatefqdn methods of the libkemplink.so library. The vulnerability stems from an undersized 256-byte buffer...