LAMMA-beta

LAMMA BETA Vulnerability Assessment Framework for all the Crypto Implimentations. An Open Source Initiative by - SECURITY MONX Lamma Framework Documentation beta File Name : README Author : @ajithatti Org : Security Monx Version : 0.0.1 Purpose : Gives introduction of Lamma Framework beta Table O...

cve-2024-3094

🛡️ Cybersecurity Project: Analyzing the XZ Backdoor in liblzma 📄 Overview This project analyzes the high-profile backdoor discovered in xz-utils liblzma , affecting versions 5.6.0 and 5.6.1. The malicious code introduced into the upstream build system targeted SSH authentication by modifying how...

CVE-2022-39952-better

FortiNAC CVE-2022-39952 PoC for CVE-2022-39952 affecting Fortinet FortiNAC. This exploit allows an attacker to execute arbitrary commands on the FortiNAC server. It is based on the PoC developed by horizon3ai, with additional options for targeting multiple hosts. Disclaimer: This exploit is for...

YellowKey-Bitlocker-CVE-2026-45585

🛡️ YellowKey-Bitlocker-CVE-2026-45585 - Recover Your BitLocker Keys Safely 📋 What This Software Does YellowKey is a free open-source utility for Windows 10 and Windows 11. It helps you extract, backup, and view your BitLocker recovery keys. This is useful if you lost access to your encrypted drive...

CVE-2018-18912

🐞 CVE-2018-18912: Easy File Sharing Web Server 7.2 - Stack-Based Buffer Overflow SEH SEH-based buffer overflow in Easy File Sharing Web Server 7.2 demonstrating how an authenticated HTTP POST parameter can corrupt the exception handler chain. 📑 Table of Contents Why this repository exists Why thi...

CVE-2025-50461

CVE-2025-50461: Remote Code Execution via Unsafe Model Deserialization in Verl Status: RESERVED This CVE ID has been assigned but is not yet published in the official CVE list. A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/modelmerger.py script whe...

CVE-2025-52385

CVE-2025-52385 Software : Studio 3T v.2025.1.0 Vulnerability Report : Studio 3T Remote Command Execution Overview A critical vulnerability in Studio 3T version 2025.1.0 and earlier allows a remote attacker to execute arbitrary code via a crafted payload exploiting the childprocess module in the...

CVE-2022-21907

CVE-2022-21907 Description 1. This repository detects a system vulnerable to CVE-2022-21907 CVSS:3.1 9.8 and protects against this vulnerability if desired. I offer 2 powershell codes in 1 line. 2. I propose pure python, powershell, ruby scripts and metasploit, nmap modules to attack a vulnerable...

POC_CVE-2015-9235

CVE-2015-9235 Demonstration of the algorithm confusion attack on Json Web Token JWT libraries. JWTs are often used in cookies to certify a user session and so this attack is critical. The node module [email protected] was used to demonstrate the vulnerability. This project was also a nice vi...

nf-tables-lpe

nf-tables-lpe Exploits of Team Orca from Sea Security and Qrious Secure for multiple vulnerabilities in Netfilter's nftable module...

CVE-2009-2265

cf8-upload.py ⭐ a python3 script to exploit CVE-2009-2265. the exploit - CVE-2009-2265 ❗ the script exploits a vulnerability found in FCKeditor 2.6.4.1 which was implemented into adobe coldfusion 8.0.1: https://vulners.com/cve/CVE-2009-2265 the script allows the user to submit a file to upload to...

CVE-2025-6019

CVE-2025-6019 Proof of Concept PoC This repository contains a Proof of Concept PoC script for CVE-2025-6019 , a Local Privilege Escalation LPE vulnerability in libblockdev and udisks. The script creates an XFS filesystem image with an SUID bash binary and exploits the vulnerability to mount it...

CVE-2025-50472

CVE-2025-50472 ModelScope Ms-Swift ModelFileSystemCache Deserialization of Untrusted Data Remote Code Execution Vulnerability RCE PoC I uploaded a code repository containing a malicious .mdl file to ModelScope for testing purposes. It can be used directly during testing. The link is:...

CVE-2021-1675

Explanation of the vulnerability The Printer Spooler is a Windows service that manages print queues. It receives jobs submitted by the user, converts them to a format the printer understands, and sends them when the printer is available. It runs as a system service spoolsv.exe with high privilege...

jboss-autopwn-1

jboss-autopwn JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security C. Papathanasiou 2010 INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss A...

CVE-2024-21534-poc

Vulnerability: CVE-2024-21534 Severity: Critical CVSS Score: 9.8 Description: The jsonpath-plus package versions = 10.0.7 is vulnerable to a Remote Code Execution RCE vulnerability that allows attackers to execute arbitrary code via Node.js's VM module. This vulnerability is caused by insufficien...

Y2S1-Project-Linux-Exploitaion-using-CVE-2016-5195-Vulnerability

Y2S1-Project-Linux-Exploitaion-using-CVE-2016-5195-Vulnerability System Exploitation May 2021 • Under System and Network Programming Module did a research and exploit a system for get to knowledge about exploitations and vulnerabilities • Identified vulnerability called CVE-2016-5195 on Linux...

omigod-lab

Readme An educational lab VM to learn about the 9.6 CVSS unauthenticated Remote Code Execution RCE vulnerability in Open Management Infrastructure software CVE-2021-38647. Disclosure original research: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure OMI source code:...

Mass-CVE-2025-29306

FoxCMS Mass Exploiter CVE-2025-29306 A specialized automation tool for security researchers to perform remote command execution RCE testing across multiple targets. 🛡️ Security Note This program is written in Bash and has been encrypted/compiled with SHC Shell Script Compiler. The source code is...

dotnetpaddingoracle

dotnetpaddingoracle Small script to check if the .NET web application is vulnerable to padding Oracle This script actually verify if the oracle is present and exploitable, not just if the patch has been installed. usage dotnetpaddingoracle.py -h -t -b -d -s -p PARAMETER Burp request file Perform...