CVE-2025-48384

CVE-2025-48384 PoC...

IOBitMalwareFighterDLL

Malware Fighter LPE 0 day LPE I found in IObit Malware Fighter v. 13.2.0. Writup: https://nathan2.com/files/iobit.pdf Overall info: https://nathan2.com/posts/iobit/ Compile the DLL as x86 and name it Register.dll. Then place it in your system's Path. By default that is...

OpenSSH-4.7p1-CVE-2008-5161-Exploit

CVE-2008-5161 OpenSSH 4.7p1 Asistente de Auditoría Automatiza la comprobación de versiones y la auditoría de credenciales de objetivos con el OpenSSH 4.7p1 heredado Debian-8ubuntu1, controlando el módulo auxiliary/scanner/ssh/sshlogin de Metasploit desde Python mediante pwntools. Este proyecto es...

CVE-2025-51591-Pandoc-SSRF-POC

CVE-2025-51591 POC de SSRF en Pandoc Una vulnerabilidad de Server-Side Request Forgery SSRF en JGM Pandoc v3.6.4 permite a los atacantes obtener acceso y comprometer toda la infraestructura mediante la inyección de un iframe manipulado. Instalar Pandoc https://pandoc.org/installing.html Ejemplo d...

poc-for-CVE-2020-13519-still-under-construction-

poc-for-CVE-2020-13519-still-under-construction- poc for CVE-2020-13519still under construction. needs refining , testing , tunning... ExploitEOP will be based on this cool blogpost. https://idafchev.github.io/blog/wrmsr/...

hbp-attack-demo

fork de https://github.com/veritas501/hbpattackdemo demo de hbpattack Referencia al blog de P0: https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html Creé un módulo vuln, simulando que tenemos una primitiva de escritura en dirección arbitrari...

CVE-2026-22738-POC

CVE-2026-22738 — SpEL Injection RCE in Spring AI SimpleVectorStore Unauthenticated remote code execution via Spring Expression Language SpEL injection in SimpleVectorStore.similaritySearch. Affected Versions | Flag | Default | Description | |---|---|---| | --target | http://localhost:8082 | Base...

CVE-2023-50164

CVE-2023-50164 Una utilidad de escaneo y PoC para CVE-2023-50164 Consideraciones La explotación de CVE-2023-50164 es muy específica del entorno. Este PoC intenta generalizar el proceso de explotación requiriendo que el usuario ingrese detalles específicos del entorno a través de las banderas del...

RegPwnBRc4BOF

RegPwn BOF for Brute Ratel C4 My Brute Ratel C4 BOF reimplementation of port of the RegPwn exploit by Filip Dragovic @Wh04m1001 / MDSec ActiveBreach. This is a sloppier BRc4 BOF reimplementation of the Flangvik's CS BOF reimplementation of the original C exploit. All credit still goes for the...

CVE-2022-1597

CVE-2022-1597 El plugin, utilizado como complemento para los temas Discy y Himer, no sanitiza ni escapa un parámetro en su formulario de restablecimiento de contraseña, lo que permite realizar ataques de Cross-Site Scripting Reflejado. Plugins afectados: WPQA history.pushState'', '', '/' Plantill...

CVE-2025-32463

CVE-2025-32463 Exploit --- Proof-of-Concept PoC DISCLAIMER: This repository contains a proof-of-concept intended only for educational, defensive research, and authorized penetration testing. Do NOT use this code on systems you do not own or do not have explicit written permission to test...

CVE-2014-4210-SSRF-PORTSCANNER-POC

CVE-2014-4210 SSRF 포트스캐너 PoC 저자: Aaron Mizrachi unmanarc [email protected] Twitter: https://twitter.com/unmanarc 라이선스: LGPLv3 책임 / 법적 면책 조항 이 프로젝트는 교육 및 윤리적 테스트 목적으로만 제작되었습니다. 사전에 서명된 상호 동의 없이 이 저장소의 소스 코드를 사용하여 대상을 공격하는 것은 불법입니다. 저는 이 저장소의 소스 코드를 포함한 모든 정보를 어떻게 사용하는지에 대해 어떠한 책임도 지지 않습니다. 이...

cve-2024-0230-blue

cve-2024-0230-blue Script auxiliar para la prueba de concepto PoC de CVE-2024-0230 Bluetooth root@kitploit: git clone https://github.com/keldnorman/cve-2024-0230-blue cd cve-2024-0230-blue chmod +x poc.sh sudo ./poc.sh...

COPY-FAIL-Detection-with-Wazuh-4.14.4

COPY FAIL Detection with Wazuh 4.14.4 - CVE-2026-31431 Detection engineering for the Copy Fail kernel LPE · Ubuntu / RHEL / SUSE / Amazon Linux 2023 / Kali What is Copy Fail? CVE-2026-31431 is a logic bug in the Linux kernel's authencesn cryptographic template. It allows any unprivileged local us...

CVE-2024-38355-PoC

CVE-2024-38355 Demo Caída de Socket.IO Este proyecto es una prueba de concepto que demuestra CVE-2024-38355 , una vulnerabilidad de denegación de servicio en socket.io. El proyecto fue creado con fines educativos para mostrar el mecanismo de ataque y cómo proteger las aplicaciones. Acerca de la...

Reproducing-CVE-2023-36802

Análisis de CVE-2023-36802 Bienvenido a mi análisis y guía de CVE‑2023‑36802, una vulnerabilidad de escalada de privilegios local en Microsoft Kernel Streaming Server mskssrv.sys. ¿De qué trataba este CVE? El error residía en mskssrv.sys, un controlador que ayuda a Windows a gestionar la...

CVE-2026-24061-POC

CVE-2026-24061-POC echo "cat /etc/passwd; id;" | python poc2.py TARGET 23 1. Connection Timeout Location: Line 25 in establishconnection method python self.connection.settimeout10 -- Adjustable connection timeout Purpose: Controls how long to wait for initial TCP connection to the target...

CVE-2024-28995

CVE-2024-28995 SolarWinds Serv-U era susceptible a una vulnerabilidad de directory traversal que permitiría el acceso para leer archivos sensibles en la máquina host. INSTALACIÓN git clone https://github.com/gotr00t0day/CVE-2024-28995.git cd CVE-2024-28995 pip3 install -r requirements.txt USO...

IOFireWireFamily-null-deref

IOFireWireFamily-null-deref IOFireWireFamily-null-deref는 CVE-2017-2388에 대한 개념 증명PoC 익스플로잇으로, macOS Sierra 10.12.4에서 수정된 IOFireWireUserClient의 NULL 포인터 역참조NULL pointer dereference 취약점입니다. 이 취약점은 FireWire 포트가 있는 장치에서 서비스 거부denial of service를 유발하도록 트리거될 수 있습니다. CVE-2017-2388...

Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data

Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data CVE‑2026‑20805: A Windows Desktop Window Manager flaw causing local information disclosure. Requires low privileges, no user interaction. Rated CVSS 5.5 Medium. Actively exploited and listed in CISA KEV; patch released January...