14331 matches found
CVE-2019-14287-
CVE-2019-14287 A script to check for the sudo security bypass CVE-2019-14287. This script checks for a vulnerable sudo version and tries to exploit it. It can run alone or can be integrated into a enumeration scanner like LinEnum.sh...
CVE-2017-15715-httpd
CVE-2017-15715-httpd WHS 4th Container Assignment Summary Apache HTTPD is a widely used HTTP server that can run PHP web pages through modphp. From versions 2.4.0 to 2.4.29, there is a parsing vulnerability where a file name ending in .php, such as 1.php\x0A, is recognized as a PHP file, allowing...
CVE-2025-31651-o
CVE-2025-31651 For a subset of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectively enforced security constraints, those constraints could be bypassed. 0x01 Status PUBLIC 0x02 PoC Finder see...
powerob
Powerob An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity. This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed. About This was built out of the need ...
CVE-2019-8656
CVE-2019-8656 CVE-2019-8656 GateKeeper Bypass https://www.fcvl.net/vulnerabilities/macosx-gatekeeper-bypass...
CVE-2019-14287
CVE-2019-14287 A script to check for the sudo security bypass CVE-2019-14287. This script checks for a vulnerable sudo version and tries to exploit it. It can run alone or can be integrated into a enumeration scanner like LinEnum.sh...
Invisi-Shell
Invisi-Shell Hide your powershell script in plain sight! Invisi-Shell bypasses all of Powershell security features ScriptBlock logging, Module logging, Transcription, AMSI by hooking .Net assemblies. The hook is performed via CLR Profiler API. Work In Progress This is still a preliminary version...
Realtek RTL8762C Information Disclosure
The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...
Realtek RTL8762C SWD Information Disclosure
The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...
CVE-2020-15916
EN GenLANConfigAttack - is a PoC for exploiting CVE-2020-15916 , a vulnerability that allows unauthorized changes to the LAN configuration of a device. Features Exploits LAN configuration vulnerability Sends malicious payload to alter network settings Bypasses security mechanisms for gaining...
Sudo-Security-Bypass-Vulnerability
This repository does not have a README...
sudo-Security-Bypass-vulnerability-CVE-2019-14287
This repository does not have a README...
CVE-2023-33668
CVE-2023-33668 Summary DigiExam is a surveillance exam and proctoring software. The software is installed in schools' or students' computers. When the student joins an exam, DigiExam will: ensure it's not running in a Virtual Machine, terminate all applications, fullscreen itself, and prevent the...
LOLBins
LOLBins PyQT app to list all Living Off The Land Binaries and Scripts for Windows from LOLBAS and Unix binaries that can be used to bypass local security restrictions in misconfigured systems from GTFOBins. Widnows Linux...
poc-nextjs-CVE-2025-29927
Next.js Middleware Subrequest Vulnerability Scanner A robust proof of concept PoC tool to detect the Next.js middleware vulnerability CVE-2025-29927. Overview This tool tests a critical vulnerability in Next.js applications where the x-middleware-subrequest header can be used to bypass security...
CVE-2026-23008-Solidity-Assembly-Return-Data-Size-Confusion
CVE-2026-23008 – Solidity Assembly Return Data Size Confusion Program Code Solidity // ReturnSizeConfusion.sol contract Victim function callExternaladdress target external returns bytes memory bool success, bytes memory ret = target.callabi.encodeWithSignature"someFunc"; requiresuccess, "call...
vulnerability-exploitation
vulnerability-exploitation Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287/Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because ...
openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options
A flaw was found in sshd, the OpenSSH server daemon. When DisableForwarding=yes is configured to prevent network traffic forwarding, it incorrectly fails to take precedence over PermitTunnel=yes. This allows a remote attacker to bypass intended security restrictions and establish a tunnel,...
Important: Red Hat Security Advisory: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...