CVE-2022-0847-Dirty-Pipe-
gaganhm3018-art/cve-2022-0847-dirty-pipe-this is a repo who is facing a escalation issue in their linux system and a news regarding problem of "Dirty pipeline"
binary-exploitationeducationexploitation+2
gaganhm3018-art/cve-2022-0847-dirty-pipe-this is a repo who is facing a escalation issue in their linux system and a news regarding problem of "Dirty pipeline"
shoucheng3/jenkinsci__workflow-cps-plugin_cve-2022-25173_2646-v6ed3b5b01ff1Exploit for CVE-2022-25173 targeting Jenkins Pipeline Groovy Plugin's CPS interpreter sandbox bypass, enabling arbitrary code execution within…
adamyordan/cve-2019-1003000-jenkins-rce-pocJenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline:…
shoucheng3/jenkinsci__workflow-multibranch-plugin_cve-2022-25175_706-vd43c65dec013Exploit for CVE-2022-25175 targeting Jenkins Pipeline: Multibranch plugin, enabling automated exploitation of a specific vulnerability in CI/CD…
khalilu020/offensive-security-adversary-emulationSimulated a real-world attack (CVE-2011-2523) against a vulnerable host, then cross-checked detection coverage against an existing…
symphony2colour/varlib-cve-2025-66034Proof-of-concept exploit for CVE-2025-66034 in the fontTools variable font generation pipeline. A crafted .designspace file allows control of the…
erdemozgen/copy-fail-cve-2026-31431Go port of the Copy Fail PoC for CVE-2026-31431, a Linux kernel authencesn flaw enabling a 4-byte write into page cache via AF_ALG and splice.…
c137req/cve-2025-6713craft aggregation pipeline to access data without proper authorisation due to improper handling of $mergeCursors in MongoDB >v8.0 <8.0.7, >v7.0…
sam00/poc-cve-2026-42826-2026-42826-microsoft-azure-devops-information-disclosure-vulnerabilityExploits CVE-2026-42826 to enumerate and extract sensitive Azure DevOps data via unauthenticated REST API requests: pipeline YAML, variable groups,…
5kr1pt/cve-2026-3854Technical breakdown of CVE-2026-3854, a GitHub RCE via header injection in git push, explaining the vulnerability, exploitation technique, and…
l3ster1337/poc-cve-2024-21542Proof-of-concept exploit for CVE-2024-21542 demonstrating arbitrary file write via Zip Slip in Luigi pipeline manager. Generates malicious archives…
zeropathai/proftpd-cve-2026-42167-pocPOCs to demonstrate CVE-2026-42167 in ProFTPD
praetorian-inc/brutusFast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative…
cruxn3t/cve-2025-0133Scope-aware bug bounty pipeline for CVE-2025-0133 (Palo Alto PAN-OS GlobalProtect reflected XSS). Shodan → H1/BC scope match → safe canary validation…
cruxn3t/cve-2020-3580Automated XSS validation pipeline for CVE-2020-3580 with Shodan-based discovery, scope matching, and approval-gated canary testing for Cisco ASA/FTD…
praetorian-inc/gatoGitHub Actions Pipeline Enumeration and Attack Tool
ynsmroztas/nextssrfCVE-2026-44578 scanner and exploit tool for SSRF in Next.js WebSocket upgrade handler. Detects vulnerable versions, extracts cloud metadata, and…
ynsmroztas/fortisandbox-rce-exploit-cve-2026-39808Unauthenticated RCE scanner for FortiSandbox CVE-2026-39808 with canary-based verification, command execution, and pipeline integration for mass…