windows-kernel-exploits

windows-kernel-exploits Introduction windows-kernel-exploits Vulnerability List Security Bulletin KB Description Operating System CVE-2021-33739 Microsoft DWM Core Library Elevation of Privilege Vulnerability Windows 10, 20 CVE-2021-1732 Windows Win32k Elevation of Privilege Vulnerability Windows...

CVE-2025-3248

CVE-2025-3248 – Execute arbitrary Python code on vulnerable Langflow server. Discovered by: Naveen Sunkavally, Horizon3.ai Status: Public Disclosure Date Reported: 2025-04-07 CVE ID: CVE-2025-3248 🧾 Screenshot 🧩 Summary A critical flaw has been discovered in Langflow that allows malicious actors ...

PoC-CVE-2017-5638

PoC: Apache Struts2 CVE-2017-5638 Safe Educational Demo 📌 Overview This project is a Proof-of-Concept PoC for CVE-2017-5638 , a famous Apache Struts2 vulnerability that allowed attackers to execute arbitrary code on affected servers. ⚠️ This repository contains a safe, non-exploitative demo...

CVE-2020-16898

CVE-2020-16898: “Bad Neighbor” CVSS Score: 8.8 CVSS Vector: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Overview On October 13, Microsoft announced an exceptionally critical vulnerability in the Windows IPv6 stack, which allows an attacker to send maliciously crafted packets to...

CVE-2021-27928-POC

CVE-2021-27928 POC Description A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval...

CVE-2024-41570

CVE-2024-41570 | Havoc C2 SSRF with RCE | Automated Reverse Shell Exploit via WebSocket This project provides a Python-based proof-of-concept PoC script to exploit a vulnerable WebSocket-based service. The script automates agent registration, WebSocket payload delivery, and remote command executi...

xzbot

xzbot Исследование бэкдора xz CVE-2024-3094. Содержит следующее: honeypot: поддельный уязвимый сервер для обнаружения попыток эксплуатации ed448 patch: патч liblzma.so для использования собственного открытого ключа ED448 backdoor format: формат полезной нагрузки бэкдора backdoor demo: CLI для...

MASS-CVE-2024-27956

MASS-CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection in ValvePress Automatic plugin. This PoC exploit the vulnerability creating a user in the target and giving Administrator rights. Being an administrator in wordpress can lead to Remote Code Execution. Usage git clone...

CVE-2019-0232

CVE-2019-0232 Exploit Remote Code Execution RCE in CGI Servlet – Apache Tomcat on Windows Refference : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ Apache Tomcat has a vulnerability in the CGI Servlet which ca...

cve-2020-0618

CVE-2020-0618 Honeypot Detects and logs attempts to exploit CVE-020-0618 SQL Reporting Services RCE Serves content and headers like SSRS would, in order to increase chance of indexing on search engines e.g. google, shodan etc. Based on the great work of MDSec and x1sec Installation Get the code...

CVE-2022-24086

CVE-2022-24086 Tested with: magento 2.4.3 and sample data Docker image: docker.io/bitnami/magento:2.4.3-debian-10-r0 First Name: var this.getTemplateFilter.filter$order.shippingaddress.cityvar...

CVE-2023-50164-ApacheStruts2-Docker

CVE-2023-50164 : Apache Struts 2 vulnerable Docker container Apache has recently released an advisory regarding CVE-2023-50164, a critical vulnerability with a severity rating of 9.8 that affects Apache Struts 2. CVE-2023-50164 is intricately tied to an organization's Apache Struts architecture a...

CVE-2026-102256

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS...

poc-cve-2018-1273

CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...

poc-cve-2018-1273

CVE-2018-1273 Spring Data Commons, 1.13부터 1.13.10, 2.0부터 2.0.5까지의 버전 및 지원이 중단된 구버전에서는 특수 요소의 부적절한 중립화로 인한 속성 바인더 취약점이 존재합니다. 인증되지 않은 원격 악의적인 사용자또는 공격자는 Spring Data REST 기반 HTTP 리소스 또는 Spring Data의 프로젝션 기반 요청 페이로드 바인딩에 대해 특별히 조작된 요청 파라미터를 제공하여 원격 코드 실행 공격을 유발할 수 있습니다. 더 많은 정보는 여기에서 확인할 수 있습니다. 실행 ...

redis_exploit

CVE-2025-49844 RediShell - Лабораторная среда Практическая лабораторная среда для тестирования и изучения критической уязвимости CVE-2025-49844 RediShell в Redis. ⚠️ ПРЕДУПРЕЖДЕНИЕ Это только для образовательных целей! Используйте только на системах, которыми вы владеете или на тестирование которы...

CVE-2021-44228

Log4Shell POC CVE-2021-44228 The scope of this repository is to provide all the components needed to exploit CVE-2021-44228, nicknamed Log4Shell, and to show how to exploit it. The ingredients needed to exploit this vulnerability are the following: 1. An LDAP Server that will redirect the...

CVE-2026-102257

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...

CVE-2026-102257

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...

CVE-2026-102257

The SonicWall SMA1000 appliance is affected by a Zip Slip vulnerability (CWE-22) within the Appliance Management Console (AMC) interface. A post-authentication attacker can use a specially crafted archive to extract files outside the intended destination directory, leading to remote code executio...