CVE-2024-28397-js2py-Sandbox-Escape

CVE-2024-28397-js2py-Sandbox-Escape js2py Vulnerability Analysis Introduction js2py is a popular python package that can evaluate javascript code inside the python interpreter. It is used by various web scrapers to parse javascript code on websites. There exists a vulnerability in the...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 exposed a backdoor in the XZ compression library, allowing remote SSH access by bypassing authentication. It’s a major supply chain attack affecting Linux systems, highlighting risks in trusted open-source components. The XZ Backdoor: A Supply‑Chain Threat that Reaches...

CVE-2020-35846

CVE-2020-35846 - Leak Cockpit Usernames PoC John Hammond | Sunday, July 25th, 2021 Proof-of-concept Python script to leak Cockpit usernames with CVE-2020-35846...

HeartLeak

HeartLeak Yet, another exploitation script for the most buzzed bug of all the time. The script has two features: scan: Generates random hosts IP addresses, checks if they supports OpenSSL, test them if they vulnerable to CVE-2014-0160 Heartbeat Buffer over-read bug and save vulnerable hosts in a...

TraditionalJay

TraditionalJay Intentionally vulnerable classic / traditional shop for security workshops — Java on a VM EC2, Azure VM, or GCP Compute Engine, not containers. Primary story: Critical VM Compromise — SQL injection → Log4Shell CVE-2021-44228 → reverse shell to external C2. !CAUTION Do not deploy to...

viber-desktop-html-injection

Viber Desktop — HTML Injection CVE-2025-55996 CVE: CVE-2025-55996 Discoverer: Thaw Khant Cycbake Product: Viber Desktop Affected: Viber Desktop 25.6.0 and possibly earlier Summary Viber Desktop's deep-link handler viber://forward?text= can render unsanitized HTML supplied in the text parameter...

CVE-2024-53677-POC

CVE-2024-53677 A kind old vulnerability that effect Apache Struts leading to LFI, and remote exection. more info about the vulnerability you can refer to this great blog. Apache Struts path traversal → RCE CVE-2024-53677 POC usage I have send much time make this as custamizable as possiable becau...

CVE-2025-6218-WinRAR-Directory-Traversal-RCE

CVE-2025-6218-WinRAR-Directory-Traversal-RCE CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user extracts a specially crafted .rar archive. By exploiting this flaw, an attacker can drop malicio...

polkit-0.96-CVE-2021-4034

polkit-0.96-CVE-2021-4034 CentOS 7.x already has an RPM package that fixes the CVE-2021-4034 vulnerability, but I couldn't find one for CentOS 6.x. I created and packaged the RPM myself by referring to the source code Red Hat has already fixed 6.x, but I couldn't find a download location...

cve-2023-42115

CVE-2023-42115: Exploit and Payload Generator Scripts This repository contains two Python scripts: 1. exploit.py : A script for exploiting CVE-2023-42115. 2. generatepayload.py : A script for generating reverse shell payloads. Prerequisites Before running the scripts, ensure you have Python 3...

BootStomp

BootStomp BootStomp is a boot-loader bug finder. It looks for two different class of bugs: memory corruption and state storage vulnerabilities. For more info please refer to the BootStomp paper at https://seclab.cs.ucsb.edu/academic/publishing/bootstomp-security-bootloaders-mobile-devices-2017 To...

SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker

terrapincheck.py A lightweight Python scanner for CVE-2023-48795 — the SSH Terrapin Prefix Truncation vulnerability. Terrapin is a protocol-level vulnerability in SSH that allows an attacker performing an active MitM to truncate the negotiated extension information, downgrading connection securit...

CVE-2025-9074-Docker-Desktop-API-Escape-PoC

🐚 docker-shell A lightweight, dependency-free bash script that gives you an emulated interactive shell inside a Docker container — using nothing but curl, dd, od, and awk. No Python, no jq, no editor required. Built for environments where you only have raw shell access and need to exec commands...

ProxyListReliabilityCheck

ProxyListReliabilityCheck Perl script to test the reliability of a list of open web proxies. The script takes in a text file list of IPAddress:Port of open web proxies to test 1 per line. It then attempts to crawl to the following URL through each target proxy:...

UTopia

Introduction UTopia is a tool for automatically generating fuzz drivers from unit tests. UTopia will let developers perform fuzz testing without special knowledge about writing fuzzers. Even developers familiar with fuzzing can save significant time by generating fuzz drivers automatically. UTopi...

SSP-Assignment-3-RCEYouLater

CVE-2023-46604: Apache ActiveMQ RCE Proof of Concept Assignment: SSP Assignment 3 Team: RCE You Later Members: Banica Horia Alexandru, Comarlau Vlad-Constantin Video link of using the repo to do the PoC:https://www.youtube.com/watch?v=vum4qTF4ygU 🚨 Overview This repository contains a fully...

CVE-2025-70342

CVE-2025-70342: Credential Interception via Named Pipe in erase-install Summary erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json. On Apple Silicon Macs, admin credentials entered during reinstall/erase operations are written...

smbexec

smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage who's blog...

CVE-2026-45156-POC

Hacker Matrix Glitch 🚨 CVE-2026-45156 🚨 Nextcloud useroidc ID4me JWT Signature Bypass Fully Automated Proof of Concept PoC Exploit for Admin Takeover. 📖 The Story Behind every CVE, there's a story. This one was found at 2 AM on a cold winter night, fueled by a breakup mashup on loop. Read the ful...

CVE-2026-34197

CVE-2026-34197 Description Improper Input Validation, Improper Control of Generation of Code ‘Code Injection’ vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access polic...