Every new exploit,
on the radar.

CVE-2023-33733 reportlab RCE

This lab was set up to test CVE-2023-33733

This project aims at re-analyzing and PoC about CVE-2023-33733. Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF …

Reportlab Library - Remote Code Execution

A modification to fortra's CVE-2023-28252 exploit, compiled to exe

it's a CVE-2023-28252 (Patched), but feel free to use it for check any outdated software or reseach

The repo contains a precompiled binary which can be run on a Windows machine vulnerable to CVE-2023-28252

Обнаружение эксплойта CVE-2023-28252

The TL;DR for the learnings of Windows Vulnerability CVE-2023-28252

it's a CVE-2023-28229 (Patched), but feel free to use it for check any outdated software or reseach

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、C…

增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持

Weblogic Upload Vuln(Need username password)-CVE-2019-2618

Weblogic Unrestricted File Upload

CVE-2019-2618-自己编写

自用验证

cve-2019-2618 需要用户名密码

Use CVE-2020-0668 to perform an arbitrary privileged file move operation.

Make CVE-2020-0668 exploit work for version < win10 v1903 and version >= win10 v1903

CVE-2020-0668

CVE-2020-0668 - Microsoft Windows Service Tracing Arbitrary File Move Local Privilege Escalation Vulnerability

CVE-2021-1675/CVE-2021-34527 PrintNightmare & CVE-2020-0668

Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability

Precompiled binaries for Privilege Escalation in Oracle VM Virtual box prior to 7.0.16

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area.

** DISPUTED ** 7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Conte…

Powershell to mitigate CVE-2022-29072

7-Zip CVE-2022-29072 Mitigation - CHM file - This script detects if the .chm file exists and removes it.

exp for https://research.checkpoint.com/extracting-code-execution-from-winrar

010 Editor template for ACE archive format & CVE-2018-2025[0-3]

Proof of concept code in C# to exploit the WinRAR ACE file extraction path (CVE-2018-20250).

CVE-2018-20250-WINRAR-ACE Exploit with a UI

Python tool exploiting CVE-2018-20250 found by CheckPoint folks

WinRar is a very widely known software for windows. Previous version of WinRaR was a vulnerability which has been patched in Feb-2019. Most of the people didn'…

这资源是作者复现微软签字证书漏洞CVE-2020-0601，结合相关资源及文章实现。推荐大家结合作者博客，复现了该漏洞和理解恶意软件自启动劫持原理。作为网络安全初学者，自己确实很菜，但希望坚持下去，一起加油！

Ghostscript command injection vulnerability PoC (CVE-2023-36664)

Scan for GhostScript files affected to CVE-2023-36664

Proof of concept developed for the CVE-2023-36664

NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC SDK softwar…

patches for SNYK-JS-JQUERY-174006, CVE-2019-11358, CVE-2019-5428

patches for SNYK-JS-JQUERY-565129, SNYK-JS-JQUERY-567880, CVE-2020-1102, CVE-2020-11023, includes the patches for SNYK-JS-JQUERY-174006, CVE-2019-11358, CVE-20…

A fix for CVE-2019-11358 (prototype pollution in jquery)

Vulnearability Report of the New Jersey official site

Collection of materials relating to FORCEDENTRY

Scan for evidence of CVE-2021-30860 (FORCEDENTRY) exploit

Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation

VM Escape for Parallels Desktop <18.1.1

VM Escape for Parallels Desktop <18.1.1

Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)

CVE-2021-38647 - POC to exploit unauthenticated RCE #OMIGOD

OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research team, specifically CVE-20…

CVE-2021-38647 POC for RCE

CVE-2021-38647 AKA "OMIGOD" vulnerability in Windows OMI

OMIGod / CVE-2021-38647 POC and Demo environment

A PoC exploit for CVE-2021-38647 RCE in OMI

A Vagrant VM test lab to learn about CVE-2021-38647 in the Open Management Infrastructure agent (aka "omigod").

CVE-2022-44877 Centos Web Panel 7 Unauthenticated Remote Code Execution

Red Team utilities for setting up CWP CentOS 7 payload & reverse shell (Red Team 9 - CW2023)

Bash Script for Checking Command Injection Vulnerability on CentOS Web Panel [CWP] (CVE-2022-44877)

Control Web Panel 7 (CWP7) Remote Code Execution (RCE) (CVE-2022-44877) (Unauthenticated)

Bash Script for Checking Command Injection Vulnerability on CentOS Web Panel [CWP] (CVE-2022-44877)

Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.

Test CVE-2018-0296 and extract usernames

Cisco ASA - CVE-2018-0296 | Exploit

https://github.com/milo2012/CVE-2018-0296.git

Exploit for CVE-2018-4233, a WebKit JIT optimization bug used during Pwn2Own 2018

Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告

Exploiting CVE-2017-7525 demo project with Angular7 frontend and Spring.

Insecure Java Deserialization Lab

Jackson Deserialization CVE-2017-7525 PoC

CVE-2017-7525 S2-055 Exploit

Proof-of-concept code for Android APEX key reuse vulnerability

Pwn2Own Vancouver 2023 Ubuntu LPE exploit

nftables oob read/write exploit (CVE-2023-35001)

Exploit CVE-2023-35001

poc for CVE-2020-1337 (Windows Print Spooler Elevation of Privilege)

CVE-2020-1337 Windows Print Spooler Privilege Escalation

CVE-2020-1048 bypass: binary planting PoC

CVE-2020-1337 a bypass of (PrintDemon) CVE-2020-1048’s patch

🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337

This is an exploit for CVE-2020-0674 that runs on the x64 version of IE 8, 9, 10, and 11 on Windows 7.

随便放点自己弄的小东西

Porting the CVE-2020-0674 exploit for Windows8.1 and Windows10

Zimbra <9.0.0.p27 RCE

cve-2022-41352 poc