CVE-2025-56383-Proof-of-Concept

Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code. The example method is as follows: Please note that the following demonstration uses npp.8.8.3.Installer.x64.exe to install Notepad++for testing, but in reality, any installed...

Reproducing-ConnMan-1.34

Connection Manager Copyright C 2007-2012 Intel Corporation. All rights reserved. Functionality and features The following features are built-in into Connection Manager: - Generic plugin infrastructure - Device and network abstraction with basic storage support - IPv4, IPv4-LL link-local and DHCP...

Dark-Moon

DarkMoon The open-source AI penetration testing platform that runs a full pentest on its own, and never leaks your data Point DarkMoon at an authorized target. 50 specialist AI agents reason, chain real exploits across web, cloud, Active Directory and Kubernetes, and return proof for every findin...

ThreatCheck

ThreatCheck Versión modificada de DefenderCheck de Matterpreter. Toma un binario como entrada ya sea desde un archivo en disco o una URL, lo divide hasta que localiza los bytes exactos que el motor objetivo marcará y los imprime en pantalla. Esto puede ser útil al intentar identificar las piezas...

CVE-2018-14665

CVE-2018-14665 Aquí puedes encontrar mi análisis y PoC para la distribución de Linux más utilizada. Por ahora empecé desde Redhat, este es el enlace para la RHSA oficial RHSA-2018:3410...

exploit-CVE-2016-7434

CVE-2016-7434 ntpd DOS exploit Ntpd suffer from a null pointer reference which is possible to trigger to crash the application. According to NTP.org, "If ntpd is configured to allow mrulist query requests from a server that sends a crafted malicious packet, ntpd will crash on receipt of that...

loldrivers-client

LOLDrivers-client The OG, blazingly fast , zero dependencies client for LOLDrivers by MagicSword. Scan your Windows computer for known vulnerable or malicious drivers. Installation Command Line Copy and paste the command below into a PowerShell terminal. This does not require an elevated...

reproducer-poc-CVE-2022-0847

Naive detector and reproducer of CVE-2022-0847 dirty pipe. Uses simple generator of syscall sequences / programs from purposefully limited set of building blocks / input values only generation, no advanced fuzzing; no mutation; no coverage guidance; no shrinking / minimization and detects...

Centry

Centry WARNING: THIS IS EXPERIMENTAL SOFTWARE. IT IS LIKELY TO CONTAIN BUGS. Updates If you have already installed Centry, please run git pull to update to the latest version. The latest updates make it much more secure against replay attacks. Introduction Centry is a panic button intended to...

SCCMSecrets

SCCMSecrets SCCMSecrets.py is an SCCM policies exploitation tool. It goes beyond NAA credentials extraction, and aims to provide a comprehensive approach regarding SCCM policies exploitation. The tool can be executed from various levels of privileges, and will attempt to uncover potential...

BlackDex

BlackDex Versión en Inglés BlackDex es una herramienta de desempaquetado que se ejecuta en teléfonos Android, compatible con Android 5.0～12. No requiere ningún entorno específico, se puede usar en cualquier teléfono, incluyendo emuladores. Solo toma unos segundos desempaquetar APKs instaladas o...

cve

CVE PoC Casi todos los PoC de CVEs disponibles públicamente. CVEs más populares actualmente...

Fortijump-Exploit-CVE-2024-47575

CVE-2024-47575 Fortinet FortiManager Ejecución Remota de Código no Autenticada, también conocido como FortiJump CVE-2024-47575 Consulte nuestra entrada de blog para detalles técnicos Para empezar, establezca su sesión ncat: root@kitploit: nc -lvvnp 80 Luego, ejecute nuestro generador de artefacto...

CVE-2023-4278

CVE-2023-4278 !\vulnerable.png./vulnerable.png root@kitploit: Exploit Title: Wordpress Plugin Masterstudy LMS = 3.0.17 - Unauthenticated Instructor Account Creation Google Dork: inurl:/user-public-account Vendor Homepage: https://wordpress.org/plugins/masterstudy-lms-learning-management-system/...

CVE-2019-12541

CVE-2019-12541 Vulnerabilidad XSS en Zoho ManageEngine ServiceDesk Plus 9.3 en SolutionSearch.do Descripción de la información: Se descubrió un problema en Zoho ManageEngine ServiceDesk Plus 9.3. Hay XSS a través del parámetro searchText de SolutionSearch.do. Autor: Concobe del equipo Tarantula -...

CVE-2023-30253

CVE-2023-30253 Dolibarr 17.0.0 Exploit de Inyección de Código PHP...

external_libexif_AOSP10_CVE-2020-0452

libexif ------- DESCRIPTION libexif is a library for parsing, editing, and saving EXIF data. It is intended to replace lots of redundant implementations in command-line utilities and programs with GUIs. FEATURES libexif supports parsing, editing and saving of EXIF data. In addition, it has gettex...

-CVE-2021-41962

-CVE-2021-41962 Descripción Existe una vulnerabilidad de Cross Site Scripting XSS en Sourcecodester Vehicle Service Management System 1.0 a través del parámetro Owner fullname en un Send Service Request en vehicleservice. Información adicional N/A Tipo de vulnerabilidad Cross Site Scripting XSS...

CVE-2021-30461

CVE-2021-30461 VOIP RCE Technical details https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/ YouTube : https://www.youtube.com/watch?v=9VBI6Lq-Rw Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...

wp2shell-Wordpress-TOWN

wp2shell by : lucifer0xf Unauthenticated Remote Code Execution for WordPress Core POC CVE-2026-63030 + CVE-2026-60137 wp2shell exploit for critical vulnerability chain in WordPress core. It chains a REST API batch route confusion bug with an SQL injection in WPQuery to achieve unauthenticated...