Every new exploit,
on the radar.

Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber

Go package that checks if RSA keys are vulnerable to ROCA / CVE-2017-15361

Bro plugin to check if certificates are affected by CVE-2017-15361

Simple PowerShell script to check whether a computer is using an Infineon TPM chip that is vulnerable to CVE-2017-15361.

Reimplementation of CVE-2017-15361 checker in C

ROCA attack on vulnerability CVE-2017-15361

A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.

福昕Foxit PDF远程代码执行漏洞CVE-2023-27363分析与复现

福昕Foxit PDF远程代码执行漏洞(CVE-2023-27363)

WebAccess远程命令执行漏洞(CVE-2017-16720)复现

DedeCMS文件包含漏洞导致后台getshell(CVE-2023-2928)复现

Nexus 3 越权漏洞利用脚本

Nexus Repository Manager 3 远程命令执行漏洞(CVE-2020-11444)

CVE-2021-37580的poc

CVE-2021-37580

Apache ShenYu Admin JWT认证绕过漏洞(CVE-2021-37580)

A vulnerability scanner that detects CVE-2021-37580 vulnerabilities.

Apache ShenYu 管理员认证绕过

Powerjob 未授权访问漏洞(CVE-2023-29922)

Repository for CVE-2023-43263 vulnerability.

CVE-2023-40429: An app may be able to access sensitive user data.

Sudo 1.6.x <= 1.6.9p21 and 1.7.x <= 1.7.2p4 Local Privilege Escalation and vulnerable container

sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 - Privilege escalation with sudo and sudoedit

cve-2010-0426

mooSocial v3.1.8 is vulnerable to cross-site scripting on Invite Friend function.

mooSocial v3.1.8 is vulnerable to cross-site scripting on Admin redirect function.

mooSocial v3.1.8 is vulnerable to Cross Site Request Forgery (CSRF) which allows attacker to change admin password.

Linux kernel hbp exploit method demo. (i.e. the degradation version of CVE-2022-42703)

Found multiple XSS vulnerabilities within PhoenixCart 1.0.8.0

PoC for CVE-2023-44962

Clone from gist

CVE-2021-3060