Every new exploit,
on the radar.

CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution (RCE) through a buffer overflow exploit.

PoC for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA g…

Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE (CVE-2025-0282)

A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282, CVE-2023-46805, an…

# CVE-2025-0282: Remote Code Execution Vulnerability in [StorkS]

Exploit for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for Z…

Ivanti Connect Secure, Policy Secure & ZTA Gateways - CVE-2025-0282

Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.

LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113

Hi, This is to check targets vulnerable for CVE-2024-49113 in bulk, faster.

FYP: Reproduced CVE-2024-49113 PoC on Windows Server 2019 (ref. SafeBreach); assessed Windows EDR detection gaps and produced ISO 27001-aligned remediation rep…

SafeBreaches CVE-2024-49113 POC(LdapNightmare) Integrated into Metasploit

Reproduction of cve-2024-49113-ldap_nightmare_reproduction

CVE-2018-6574 POC : golang 'go get' remote command execution during source code build

CVE-2018-6574 for pentesterLAB

CVE-2018-6574: go get RCE solution for pentesterlab challenge

Exploit for remote command execution in Golang go get command.

WSUS Unauthenticated RCE

Helps defenders find their WSUS configurations in the wake of CVE-2025-59287

Defensive PoC decoy for CVE-2025-59287 (WSUS) - emulates WSUS endpoints, captures request bodies and metadata, saves evidence for forensic analysis, and provid…

powershell version of hawktrace POC exploit

Working exploit (PoC) for CVE-2025-59287 — WSUS vulnerability. Featured on Vulners and DeepWiki.

Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317

Exploit script written in C# to aid gaining a reverse shell on targets with Windows Server Update Service(WSUS) CVE-2025-59287.

CVE-2025-59287 — Critical unauthenticated RCE in Windows Server Update Services (WSUS) via unsafe deserialization of an AuthorizationCookie, enabling SYSTEM-le…

Educational PoC for CVE‑2026‑21509 (Microsoft Office security feature bypass). Generates a harmless DOCX with dummy OLE artifacts to study EDR/AV visibility. N…

CVE-2026-21509

PowerShell script to check, apply, and test the Kill-Bit protection for the CVE-2026-21509 Microsoft Office zero-day vulnerability affecting Office 2016/2019/L…

New Physics Disclosure This repository contains a full weaponized exploit for **CVE-2026-21509**, targeting the Windows Network File System (NFSv4.1) kernel-mo…

CVE-2026-21509 is a critical bypass in the Microsoft Office OLE (Object Linking and Embedding) validation engine. While standard "laminar" exploits attempt to …

YARA rule and python script to detect potential exploits for the CVE-2026-21509 vulnerability in MS Office

Powershell script with Detection and Remediation for CVE-2026-21509

Microsoft just released emergency patches for CVE-2026-21509, a zero-day in the Office Suite that bypasses OLE/COM mitigations when a user simply opens a file.…

Proof of Concept for CVE-2026-0770 - Langflow Remote Code Execution

Langflow Remote Code Execution (RCE) Proof-of-Concept

CVE-2026-0770

LangFlow RCE | CVE-2026-0770 | Proof-Of-Concept

Langflow remote code execution exploit

CVE Reproduction: cve-2026-0770-langflow_rce_reproduction

Detection for CVE-2025-61882 & CVE-2025-61884

A critical pre-authentication Remote Code Execution (RCE) flaw in Oracle E-Business Suite (versions 12.2.3 - 12.2.14) allows attackers to gain full control ove…

Exploit for CVE-2025-61882 (do not use without any written permission).

Detects Oracle E-Business Suite (CVE-2025-61882). Detection: multi-tier checks — fingerprinting, version checks, endpoint & SSRF tests, timing analysis & contr…

POC of CVE-2025-61882

Simulated PoC for CVE-2025-2783 — a sandbox escape vulnerability in Chrome's Mojo IPC. Includes phishing delivery, memory fuzzing, IPC simulation, and logging.…

This project is a research-oriented and educational simulation designed to demonstrate the concept of a sandbox escape vulnerability within Google Chrome (ve…

Full-chain exploit for CVE-2025-2783 (Ipcz Sandbox Escape & RCE).

CVE Reproduction: cve-2025-2783-chrome_sandbox_escape_reproduction

RDL的堆溢出导致的RCE

CVE-2024-38077: Remote Code Execution Vulnerability in Windows Remote Desktop Licensing Service

远程探测 remote desktop licensing 服务开放情况，用于 CVE-2024-38077 漏洞快速排查

检测RDL服务是否运行，快速排查受影响资产

CVE-2024-38077,仅支持扫描测试~

CVE-2024-38077，本仓库仅用作备份，

基于135端口检测目标是否存在CVE-2024-38077漏洞

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC

This PoC is targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474. This script automates the exploitation process, inclu…

Exploitation and Post-Exploitation Multitool for Palo Alto PAN-OS Systems affected by vulnerabilities CVE-2024-0012 and CVE-2024-9474

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC

Python script for CVE-2024-0012 / CVE-2024-9474 exploit

CVE-2024-0012批量检测脚本

PANW NGFW CVE-2024-0012

GameOver(lay) Ubuntu Privilege Escalation

GameoverlayFS (CVE-2023-2640 and CVE-2023-32629) exploit in Shell Script tested on Ubuntu 20.04 Kernel 5.4.0

CVE-2023-2640 CVE-2023-32629

Escalating Privilege using CVE-2023-2640 CVE-2023-3262

POC exploits demonstrating OverlayFS-based local privilege escalation vulnerabilities in Ubuntu (CVE-2023-2640 & CVE-2023-3262)

Research implementation demonstrating interaction with Linux eBPF subsystem related to CVE-2021-3490. Includes BPF map creation, syscall wrappers, namespace se…

CVE-2021-22555 exploit rewritten with pipe primitive

CVE-2021-22555 Exploit

This repo hosts TUKRU's Linux Privilege Escalation exploit (CVE-2021-22555). It demonstrates gaining root privileges via a vulnerability. Tested on Ubuntu 5.8.…

Script of Network Security Project - Attack on CVE-2021-22555

Formal verification example for CVE-2020-8835

CVE-2017-16995（Ubuntu本地提权漏洞）

👻CVE-2017-16995

Exploit adapted for a specific PoC on Ubuntu 16.04.01

Writeup for CVE-2017-16995 Linux BPF Local Privilege Escalation

CVE-2017-16995 eBPF PoC for Ubuntu 16.04

CVE-2017-16995 ubuntun本地提权 POC

Linux Kernel Version 4.14 - 4.4 (Ubuntu && Debian)

POE code for CVE-2017-1000112 adapted to both funtion on a specific VM and Escape a Docker

Exploit work Privilege Escalation CVE-2017-1000112

Escape from Docker using CVE-2017-1000112 and CVE-2017-18344, including gaining root privilage, get all capbilities, namespace recovery, filesystem recovery, c…

CVE-2022-30190-follina.py-修改版，可以自定义word模板，方便实战中钓鱼使用。

POC CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina

CVE-2022-30190 Follina POC

Microsoft Office Word Rce 复现(CVE-2022-30190)

Proof of Concept of CVE-2022-30190

This Repository Talks about the Follina MSDT from Defender Perspective

Exploit Microsoft Zero-Day Vulnerability Follina (CVE-2022-30190)

Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files

WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation

CVE-2022-0441 - MasterStudy LMS 2.7.6

The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to regi…

Checker for CVE-2022-0441

Mirrored from tegal1337/CVE-2022-0441

Windows LPE

A firebeam plugin that exploits the CVE-2024-26229 vulnerability to perform elevation of privilege from a unprivileged user

BOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel

Windows CSC服务特权提升漏洞。 当程序向缓冲区写入的数据超出其处理能力时，就会发生基于堆的缓冲区溢出，从而导致多余的数据溢出到相邻的内存区域。这种溢出会损坏内存，并可能使攻击者能够执行任意代码或未经授权访问系统。本质上，攻击者可以编写触发溢出的恶意代码或输入，从而控制受影响的系统、执行任意命令、安装恶意软…

CWE-781: Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code

Nim touch up of CVE 2024 26229

Windows LPE

Mass CVE-2026-23550 Exploit

authorized CYBERDUDEBIVASH ECOSYSTEM tool for detecting CVE-2026-23550 in WordPress Modular DS plugin

CVE-2026-23550 - Modular DS WordPress Plugin **Unauthenticated Admin Access**

🔴 EpSiLoNPoInT - CVE-2026-23550 Modular DS Zero-Click **Framework d'exploitation Modular DS Admin Bypass** ## 🎯 CVE Ciblée Principale **CVE-2026-23550** : Mo…

CVE PoC

Fix WinVerifyTrust Signature Validation Vulnerability, CVE-2013-3900, QID-378332

Powershell script that checks for cert padding in the Windows Registry and adds it if it does not exist. Meant to resolve the WinTrustVerify Vulnerability.

Remediation for CVE-2013-3900

WinVerifyTrust Signature Validation CVE-2013-3900 Mitigation (EnableCertPaddingCheck)

LPE exploit for CVE-2023-36802

Exploit for CVE-2023-36802 targeting MSKSSRV.SYS driver

PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy

CVE-2023-36802 ITW case

Reverse engineering and vulnerability research on CVE-2023-36802, focusing on object type confusion in mksssrv.sys.

Old CVE, but new way to leak everything.

Android attempt at PoC CVE-2016-8655

PoC for CVE-2016-8655 that causes a kernel panic

Linux af_packet.c race condition (local root)

Chocobo Root (CVE-2016-8655) Analysis

CosmicSting (CVE-2024-34102)

POC for CVE-2024-34102. A pre-authentication XML entity injection issue in Magento / Adobe Commerce.

CVE-2024-34102: Unauthenticated Magento XXE

CosmicSting: critical unauthenticated XXE vulnerability in Adobe Commerce and Magento (CVE-2024-34102)

Exploitation CVE-2024-34102

Adobe Commerce XXE exploit

POC for CVE-2024-34102 : Unauthenticated Magento XXE and bypassing WAF , You will get http connection on ur webhook

CVE-2024-34102 (Magento XXE)

ES File Explorer Open Port Vulnerability - CVE-2019-6447

Exploiting Android Vulnerability in ES File Explorer

ES File Explorer Open Port Vulnerability - CVE-2019-6447

Very basic bash script to exploit the CVE-2019-6447.

ES File Explorer v4.1.9.7.4 Open port vulnerability exploit. CVE-2019-6447

This repository is developed to understand CVE-2019-6447