79234 matches found
Simulation_CVE-2024-46256
CVE-2024-46256 & CVE-2024-46257 – PoC Simulation Overview This repository contains a step-by-step, image-backed Proof of Concept PoC simulating two vulnerabilities in Nginx Proxy Manager that enable OS Command Injection, leading to Remote Code Execution RCE after authentication. Affected product:...
CVE-2024-21626-demo
CVE-2024-21626-demo Demo for the LT at Container Runtime Meetup 5. This is to raise awareness of the attack risk based on publicly known information, and misuse is strictly prohibited. Slides Container Runtime Meetup 5 - Can You Really Trust That Image? Taking Host Root with CVE-2024-21626 Loggin...
tpwn-bis
tpwn-bis simple poc for cve-2015-5932 / cve-2015-5847 / cve-2015-5864 now escalates to root and spawns a shell. a big thanks to @qwertyoruiop for original code and help!...
CVE-2024-32019-Netdata-ndsudo-Privilege-Escalation-PoC
CVE-2024-32019 Netdata ndsudo Privilege Escalation PoC Summary CVE-2024-32019 is a local privilege-escalation flaw in Netdata’s SUID helper ndsudo that lets a local user execute arbitrary programs as root via an untrusted search path PATH hijacking. The issue exists because ndsudo restricts comma...
cve-reproduction-lab
CVE Reproduction Lab Overview This project is a cybersecurity research laboratory designed to demonstrate the real-world impact of software vulnerabilities through controlled exploitation and defensive patch simulation. The lab focuses on CVE-2021-41773, a critical path traversal vulnerability in...
SmmBackdoor
SMM backdoor for UEFI based platforms !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! This is legacy abandoned project, for current version of the backdoor check SMM Backdoor Next Gen project page and its documentation: https://github.com/Cr4sh/SmmBackdoorNg...
CVE-2018-20162-digi-lr54-restricted-shell-escape
layout: post title: "CVE-2018-20162: Digi TransPort LR54 Restricted Shell Escape" author: sgo category: security The Digi TransPort LR54 is a high speed LTE router commonly used by industry, infrastructure, retail and public transportation. It supports running python scripts in a restricted...
Exploit for CVE-2026-98432
CVE-2026-98432 checker: Linux TCP use-after-free CVSS 9.8 U...
iovy_root_research
Inspired by dosomder/iovyroot https://github.com/dosomder/iovyroot A root tool based on the CVE-2015-1805 vulnerability It supports 32 and 64bit, get sys call table address via swi. ref to Getting syscalltable on Android...
flow_divert-heap-overflow
flowdivert-heap-overflow flowdivert-heap-overflow is a proof-of-concept exploit for CVE-2016-1827, which was patched in OS X El Capitan 10.11.5 and iOS 9.3.2. The vulnerability is a series of unchecked arithmetic operations on an untrusted length supplied from user space in the function...
CVE-2025-54322-exploit
CVE-2025-54322: XSpeeder SXZOS Pre-Auth RCE Exploit A professional Proof-of-Concept PoC exploit for CVE-2025-54322 , a critical pre-authentication remote code execution vulnerability in XSpeeder SXZOS firmware. This vulnerability was discovered and disclosed by the autonomous AI agent from pwn.ai...
CVE-2018-1207-better
Exploit PoC for CVE-2018-1207: Dell iDRAC7/iDRAC8 RCE Reverse Shell This repository contains a Proof of Concept python script to demonstrate a remote code execution exploit present in iDRAC7 and iDRAC8 devices with firmware versions 2.52.52.52 and below. This exploit allows attacks to run code as...
CVE-2022-4262
CVE-2022-4262 Full Analysis including root cause, PoC, exploit and slides of CVE-2022-4262. Disclaimer This repository is intended solely for educational purposes and must not be used for any malicious activities...
CVE-2023-0179-POC-
CVE-2023-0179 POC Credits to https://github.com/TurtleARM Steps to Reproduce Install Ubuntu-22.04.5-live-server-iso and fully install the version, but don’t update the system Install the Linux kernel version 6.1.6 onto the Virtual Machine with the Ubuntu version 24.04.5 Install the following...
CVE-2023-36427
CVE-2023-36427 This repo contains the report and exploit of CVE-2023-36427, memory corruption at arbitrary physical addresses from the root partition on Windows. The details and exploit of the vulnerability are in the report sent to Microsoft. Timeline July 2 - Sent a report to a friend of mine a...
pwncat_dirtypipe
pwncatdirtypipe pwncat module that automatically exploits CVE-2022-0847 dirtypipe Introduction The purpose of this module is to attempt to exploit CVE-2022-0847 dirtypipe on a target when using pwncat. There is no need to setup any directories, compile any source or even have gcc on the remote...
CVE-2025-47917
CVE-2025-47917 Exploit Use-After-Free in mbedTLS Author : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-47917 Vulnerability : Use-After-Free UAF in mbedTLS 3.6.4 name parsing Description This repository contains an exploit targeting a Use-After-Free vulnerability in the...
CVE-2019-19356
NETIS router WF2419 RCE CVE-2019-19356 Context The vulnerability is an authenticated Remote Code Execution RCE as root through the NETIS WF2419 router Web management page. The vulnerability has been found on firmware version V1.2.31805 and on the last available firmware version V2.2.36123. Other...
MagiskEoP
Introduction This is an exploit for a vulnerability CVE-2024-48336 in Magisk app that allows a local app to silently gain root access without user consent. Vulnerability was initially reported by @vvb2060 and PoC-ed by @canyie. It has been fixed in Canary 27007. Demo video for exploit this...