dirtypipe
drapl0n/dirtypipeDirtyPipe: Exploit for a new Linux vulnerability known as 'Dirty Pipe(CVE-2022-0847)' allows local users to gain root privileges. The vulnerability…
binary-exploitationexploitationpayload-generation+4
7
drapl0n/dirtypipeDirtyPipe: Exploit for a new Linux vulnerability known as 'Dirty Pipe(CVE-2022-0847)' allows local users to gain root privileges. The vulnerability…
ex-cal1bur/smb_cve-2025-24071Exploited CVE-2025-24071 via SMB by hosting a .library-ms file inside a .tar archive. Using tar x from smbclient, the payload is extracted…
elsevar11/cve-2024-0670-checkmk-agent-local-privilege-escalation-exploitThis repository contains an exploit demonstration for CVE-2024-0670, a local privilege escalation vulnerability affecting the CheckMK Agent for…
sergeb250/blueduckyBlueDucky exploits a Bluetooth vulnerability, specifically CVE-2023-45866, which allows an attacker to inject keystrokes into a target device. The…
estebanzarate/cve-2019-9194-elfinder-command-injection-pocCommand injection vulnerability in elFinder <= 2.1.47 via the PHP connector component. Allows unauthenticated remote code execution as the web server…
rmccarth/cve-2021-3164Church Rota version 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to…
simoesctt/sctt-2026-33-0007-the-ole-vortex-laminar-bypass-Microsoft just released emergency patches for CVE-2026-21509, a zero-day in the Office Suite that bypasses OLE/COM mitigations when a user simply…
pulentoski/explotacion-cve-2023-32315-openfirePython exploit for CVE-2023-32315 targeting Openfire servers. Bypasses admin panel authentication via Unicode path traversal to create an…
ungabunga-ctf/cve-2023-26039CVE-2023-26039 - ZoneMinder. Any authenticated user can construct an api command to execute any shell command as the web user.
xshadow-here/cve-2026-4882User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File Upload
monke443/cve-2021-44967Authenticated (privileged) remote command execution in LimeSurvey Version 5.2.4 via upload and install plugins allows a remote user to upload…
cyb3rpeace/cve-2021-34527PowerShell local privilege escalation exploit for PrintNightmare (CVE-2021-34527) targeting Windows Print Spooler. Embeds custom DLL payload to add…
estebanzarate/cve-2024-25600-wordpress-bricks-builder-rce-pocUnauthenticated remote code execution vulnerability in WordPress Bricks Builder <= 1.9.6. The template render endpoint accepts PHP code without…
rashidkhanpathan/cve-2022-44830Proof-of-concept exploit for CVE-2022-44830, a CSV injection vulnerability in Sourcecodester Event Registration App v1.0. Demonstrates remote code…
whoami-chmod777/cve-2021-1675---printnightmare-lpe-powershell-PowerShell exploit for CVE-2021-1675 (PrintNightmare) performing local privilege escalation by adding a user to the local administrators group via…
gunzf0x/grav-cms-rce-authenticatedExploit against Grav CMS (versions below 1.7.45) that allows Remote Code Execution for an authenticated user - CVE-2024-28116
ghostwirez/cve-2024-39090-pocThis PoC script exploits CVE-2024-39090, a CSRF to Stored XSS vulnerability in PHPGurukul Online Shopping Portal v2.0. It automates CSRF attacks to…
asepsaepdin/cve-2023-38831Generates a malicious RAR archive exploiting CVE-2023-38831 in WinRAR to execute arbitrary code when a user opens a benign file, with a Python-based…