CVE-2026-0073

ADB TLS Auth Bypass Exploit CVE-2026-0073 An automated network scanner and exploitation tool for CVE-2026-0073 , a vulnerability in the Android Debug Bridge daemon adbd that allows unauthenticated Remote Code Execution RCE and interactive shell access via Wireless Debugging. This tool is...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...

EDRaser

EDRaser Usage Guide EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual. Automated Mode In automated mode, EDRaser scans the C class of a given address space of IPs...

CVE-2020-16899

CVE-2020-16899: Microsoft Windows TCP/IP Denial of Service Vulnerability CVSS Score: 7.5 CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C Overview On October 13, Microsoft announced a critical vulnerability in the Windows IPv6 stack, which allows an attacker to send...

FreePBX-CVE-2025-57819-RCE

FreePBX 16 — Unauthenticated SQLi to RCE Proof-of-concept exploit chaining two FreePBX vulnerabilities to go from zero access to remote code execution on FreePBX 16. CVE| Component| Impact ---|---|--- CVE-2025-57819| Endpoint module loader brand parameter| Unauthenticated stacked SQL injection...

boopkit

================================================================ ██████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗██╗████████╗ ██╔══██╗██╔═══██╗██╔═══██╗██╔══██╗██║ ██╔╝██║╚══██╔══╝ ██████╔╝██║ ██║██║ ██║██████╔╝█████╔╝ ██║ ██║ ██╔══██╗██║ ██║██║ ██║██╔═══╝ ██╔═██╗ ██║ ██║ ██████╔╝╚██████╔╝╚██████╔╝██║ ██║...

CVE-2022-27254

CVE-2022-27254 PoC for vulnerability in Honda's Remote Keyless SystemCVE-2022-27254 Disclaimer: For educational purposes only. Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh, a student at UMass Dartmouth and HackingIntoYourHeart. Others mentioned in this repository ar...

CVE-2020-9484

CVE-2020-9484 POC for CVE-2020-9484 POC for CVE-2020-9484 Apache Tomcat RCE by deserialization CVE-2020-9484 Explore the docs » Getting Started 1. Clone this repository, then you will be able to use CVE-2020-9484 and modify the source code if needed. 2. Download ysoserial jar 3. place both...

CVE-2025-31324

CVE-2025-31324 Proof-of-Concept 0day for SAP NetWeaver created by ShinyHunters CVE-2025-31324 is a critical "Unrestricted File Upload" vulnerability affecting the SAP NetWeaver Application Server AS Java. Specifically, it resides within the Visual Composer component VCFRAMEWORK. The flaw allows a...

CVE-2019-3980

CVE-2019-3980 CVE-2019-3980 exploit written in win32/c++ openssl dependency. Port of https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcsdwDrvInstrce.py Instructions This PoC requires staticly linked openssl libraries. Place openssl includes in thirdparty\include\openssl and libs ...

CVE-2025-14174-Poc

CVE-2025-14174 PoC Exploit Overview This repository contains a fully functional Proof-of-Concept PoC exploit for CVE-2025-14174 also tracked as EUVD-2025-203113, a critical memory corruption vulnerability in the ANGLE graphics engine. The flaw stems from improper restriction of operations within...

EUVD-2026-112026

The che-machine-exec service constructs a shell command by concatenating user-controlled input the username and namespace fields from the /exec/init and /exec/config JSON endpoints into a double-quoted sh -c "echo "..." ..." invocation without any escaping. When che-machine-exec is run with...

CVE-2026-114278

The che-machine-exec service is vulnerable to unauthenticated command injection because it constructs shell commands by concatenating user-controlled input from the /exec/init and /exec/config JSON endpoints without proper escaping. Specifically, the username and namespace fields are inserted int...

CVE-2026-114278 Unauthenticated Command Injection via kubeconfig Username in che-machine-exec

The che-machine-exec service constructs a shell command by concatenating user-controlled input the username and namespace fields from the /exec/init and /exec/config JSON endpoints into a double-quoted sh -c "echo "..." ..." invocation without any escaping. When che-machine-exec is run with...

CVE-2020-11651

CVE-2020-11651 An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user...

CHAOS

CHAOS: Remote Administration Tool CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems. Report bug · Request feature · Quick start · Screenshots Disclaimer THIS SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. YOU MA...

CVE-2018-16763

CVE-2018-16763 Fuel CMS 1.4.1 - Remote Code Execution - Python 3.x Original Script : Exploit-DB...

CVE-2025-1974

DEMO https://youtu.be/3hYlHeaf2mQ What is CVE-2025-1974? CVE-2025-1974 IngressNightmare is a critical CVSS 9.8 unauthenticated Remote Code Execution vulnerability in the Kubernetes ingress-nginx admission controller. Attack Flow: 1. Upload : Send malicious shared library .so file to NGINX via HTT...

CVE-2023-21716-Analysis-ICT287

CVE-2023-21716 Analysis-ICT287: Microsoft Word Remote Code Execution Overview This repository documents the analysis and reproduction of CVE-2023-21716, a heap-based buffer overflow vulnerability in Microsoft Word's RTF parser with a CVSS score of 9.8 Critical. What's Inside File| Description...

CVE-2025-9074-POC

CVE-2025-9074-POC Proof-of-Concept exploit for CVE-2025-9074 ⚠️ Legal Disclaimer This PoC is released for educational and authorized security testing purposes only. Unauthorized exploitation of systems is illegal and unethical. Use this PoC only on environments you own or have explicit permission...