
Exploits
Original CVEs, exploit PoCs, and security advisories with detailed vulnerability chains, privilege escalation, and container escape techniques for…

Original CVEs, exploit PoCs, and security advisories with detailed vulnerability chains, privilege escalation, and container escape techniques for…

POC Script for CVE-2020-12800: RCE through Unrestricted File Type Upload

CVE-2020-14008 - ManageEngine Applications Manager RCE

CVE-2020-12351

Exploit for CVE-2020-6418, a type confusion in V8, allowing remote code execution via crafted HTML page. Uses Metasploit to deliver a reverse shell…

Privilege escalation in QQBrowser

Remote code execution in Mediawiki Score

Shell exploit script for CVE-2020-10257, an unauthenticated RCE in the WordPress TRX Addons plugin that creates admin users via the wp-json API…

Published: 2024-10-16 | Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload

Proof-of-concept exploit demonstrating cross-site websocket hijacking (CSWSH) in Eclipse CHE, enabling interactive RCE via unauthenticated websocket…

CVE-2020-13671 - Drupal RCE via File Upload Vulnerability Analysis and PoC

Windows kernel exploit for CVE-2020-17057 using palette objects with dangling data pointers, targeting type isolation bypass for privilege escalation.