CVE-2024-56426
xcracker000/cve-2024-56426Exploit kit for Exynos 9830 bootROM that delivers signed-boot bypass, custom key injection, and memory-dump payloads for Samsung SM-G985F devices.
android-securityembedded-systems-securityexploitation+7
1
Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.
xcracker000/cve-2024-56426Exploit kit for Exynos 9830 bootROM that delivers signed-boot bypass, custom key injection, and memory-dump payloads for Samsung SM-G985F devices.
watchtowrlabs/watchtowr-vs-citrix-netscaler-preauth-rce-cve-2026-8452Proof-of-concept exploit for Citrix NetScaler CVE-2026-8452 that verifies pre-auth RCE by building shellcode and executing commands through a…
horkimhab/cve-rubyRuby 4.0 Universal RCE Deserialization Gadget Chain - Draft or TODO
k3ystr0k3r/cve-2026-31816PoC exploit for critical Budibase auth bypass: unanchored webhook regex lets attackers append ?/webhooks/trigger, reach protected APIs, and chain…
trustedsec/elfloaderLoads and runs ELF objects entirely in memory across x86_64/x86 Linux systems, resolving libc symbols at runtime for stealthy post-exploitation…
bugel/cve-2026-43499-m3q-azf1This package is not a complete root. It flips SELinux to Permissive and holds reclaim long enough for follow-on work. Host `uid=0` is not achieved…
omribaso/sccm-cve-2026-47301-remote-code-execution-exploitProof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path…
aramosf/cve-2026-54433Configurable Python PoC for CVE-2026-54433, a stored XSS in Roundcube's plain-text email renderer. Generates crafted .eml, sends via SMTP, and…
lxxexxbxx/cve-2026-33017PoC exploit for an unauthenticated RCE in Langflow <=1.8.1, including source-level root cause analysis, AST-aware reverse shell payload, Docker lab,…
sangsenimanwartefak/cve-2026-45034PoC exploit for PHPSpreadsheet's phar:// deserialization vulnerability, bypassing prohibitWrappers to achieve remote code execution on vulnerable PHP…
iltosec/chyrp-lite-rce-pocCVE-2026-53767 + CVE-2026-53768 - Authenticated RCE in Chyrp Lite ≤ 2026.01 via uploads_path blocklist bypass and missing extension validation
judgedbykira/cve-2026-25938-fuxa-unauthenticated-rceAn explanation and PoC to exploit CVE-2026-25938 Unauthenticated RCE Vulnerability on FUXA
pimpamebanihah/cve-2026-43499-app.soProof-of-concept shared library for exploiting a specific CVE, demonstrating impact and validating exposure on affected application deployments.
gmh5225/aether-c2-framework🛠️ Explore custom C2 TTPs with Aether-C2-Framework, focusing on lightweight Rust implants and stealthy transport stacks to reduce forensic…
etahen/etahenPS5 homebrew enabler payload offering post-exploitation features: custom plugin/payload loading, unsigned fself/fpkg support, debug settings, FTP…
boreas37/cve-2026-73034-pocCVE-2026-73034 — DB-GPT v0.8.1 unauth path traversal → arbitrary file write as root via user-id header. Verified + fix diff
gutierre0x80/cve-2026-59827Technical analysis and proof of concept for CVE-2026-59827, a critical unsafe Java deserialization vulnerability in Metabase leading to remote code…
agent3137/cve-2017-9805-exploitCVE-2017-9805-Exploit