CVE-2026-125659

The eMudhra emBridge software contains an information disclosure vulnerability due to missing authorization checks in the FileBrowser API endpoints. These endpoints perform file system enumeration using the LocalSystem account without validating the requester's authority. An unauthenticated attac...

CVE-2026-126380

Vvveb versions before 1.0.9.0 are vulnerable to Remote Code Execution (RCE) due to a denylist bypass in system/traits/media.php. The vulnerability occurs because the .phar extension is misconfigured with a leading dot, allowing authenticated administrators to upload .phar PHP files . Attackers ca...

CVE-2026-119077

The ELEX WordPress HelpDesk & Customer Ticketing System plugin (versions

ROOT-OS-DEBIAN-11-CVE-2026-56407 CVE-2026-56407 in expat - Patched by Root

Root has patched CVE-2026-56407 in the expat package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-48074 CVE-2025-48074 in openexr - Patched by Root

Root has patched CVE-2025-48074 in the openexr package for Root:Debian:13. Multiple fixed versions available...

Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: WindowsAFDLPECVE-2023-21768.exe where is the process ID in decimal of the...

BlueKeep

Bluekeep PoC This repo contains research concerning CVE-2019-0708. Bluekeep or CVE-2019-0708 is an RCE exploit that effects the following versions of Windows systems: Windows 2003 Windows XP Windows Vista Windows 7 Windows Server 2008 Windows Server 2008 R2 The vulnerability occurs during...

CVE-2023-36874_BOF

CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...

KRBUACBypass

Background This POC is inspired by James Forshaw @tiraniddo shared at BlackHat USA 2022 titled “ Taking Kerberos To The Next Level ” topic, he shared a Demo of abusing Kerberos tickets to achieve UAC bypass. By adding a KERB-AD-RESTRICTION-ENTRY to the service ticket, but filling in a fake...

Change-Lockscreen

Change-Lockscreen Change-Lockscreen is a tool to trigger network authentications as SYSTEM by changing the Windows lock screen image from the command line to perform privilege escalation attacks such as the one described in the post linked below:...

AllTools

AllTools All reasonably stable tools AccessMask - decode access mask for common object types BgInfo - WPF version of the Sysinternals BgInfo tool BITSMgr - BITS jobs manager application CLR Explorer - View .NET process information / dump file CpuStres - thread/CPU stress testing app CpuStress...

oni-framework

Oni-Framework Oni framework is a platform for embedded device software development. It is used in order to remotely debug/add functionality to an embedded device. As of right now, the main concepts are a fully modular plugin system, with local and remote rpc. This was designed to run at ring-0...

cve-2024-3400

cve-2024-3400 Python exploit and checker script for CVE-2024-3400 Palo Alto Command Injection and Arbitrary File Creation usage: cve-2024-3400.py -h exploit,check ... CVE-2024-3400 - Palo Alto OS Command Injection positional arguments: exploit,check Available modules exploit Exploit module of...

CVE-2021-21551

CVE-2021-21551 Exploit to SYSTEM for CVE-2021-21551 SpoolPrinter Privesc using SeImpersonatePrivileges was made thanks to @ForrestOrr https://github.com/forrest-orr/DoubleStar/tree/main/Payloads/Source/Stage3SpoolPotato I basically just tossed the exploit function in his code and altered it ever ...

CVE-2022-26503

CVE-2022-26503 Summary: Vulnerability CVE-2022-26503 in Veeam Agent for Microsoft Windows allows local privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code with LOCAL SYSTEM privileges. Shout out to @ultrayoba The Patch: The implemented patch...

SirepRAT

SirepRAT - RCE as SYSTEM on Windows IoT Core SirepRAT Features full RAT capabilities without the need of writing a real RAT malware on target. Context The method is exploiting the Sirep Test Service that’s built in and running on the official images offered at Microsoft’s site. This service is th...

MemProcFS

MemProcFS: MemProcFS is an easy and convenient way of viewing physical memory as files in a virtual file system. Easy trivial point and click memory analysis without the need for complicated commandline arguments! Access memory content and artifacts via files in a mounted virtual file system or v...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...

php-8.1.0-dev-backdoor-rce

PHP 8.1.0-dev Backdoor Remote Code Execution PHP 8.1.0-dev Backdoor System Shell Script PHP verion 8.1.0-dev was released with a backdoor on March 28th 2021, but the backdoor was quickly discovered and removed. If this version of PHP runs on a server, an attacker can execute arbitrary code by...

CVE-2025-1910-WatchGuard-Privilege-Escalation

WatchGuard Mobile VPN with SSL Client Privilege Escalation CVE-2025-1910 A privilege escalation vulnerability in WatchGuard's Mobile VPN with SSL MD5SUM Pack into a .wgssl file tar -czf ../clientexploit.wgssl client.ovpn MD5SUM run.bat cd .. 5. Serve the malicious client.wgssl file via flask: Sta...