Exploit catalog

CVE-2025-41646 - Critical Authentication bypass

CitrixBleed-2 (CVE-2025-5777) – proof-of-concept exploit for NetScaler ADC/Gateway “memory bleed”

CVE-2023-46747-RCE PoC

Unauthenticated Remote Code Execution exploit for CVE-2025-20281 in Cisco ISE ERS API. Execute commands or launch reverse shells as root — no authentication required.

POC to exploit WordPress 5.6-5.7 (PHP 8+) Authenticated XXE Injection.

🔓 Local privilege escalation PoC for CVE-2025-32462 (sudo -h bypass) – gain root via misconfigured sudoers

🛡️ Proof of Concept (PoC) for CVE-2025-32463 - Local privilege escalation in sudo (versions 1.9.14 to 1.9.17). This exploit abuses the --chroot option and a malicious nsswitch.conf to execute arbitrary code as root. ⚠️ For educational and authorized testing only.

# CVE-2025-32463 – Sudo EoP Exploit (PoC) with precompiled .so

Exploit for CVE-2024-4040 – Authentication bypass in CrushFTP via CrushAuth cookie and AWS-style header spoofing. Stealthy Python PoC with secure token generation, SSL bypass, and improved output.

Privilege escalation exploit for CVE-2025-32463 using a malicious NSS module injected via sudo -R. This version creates a stealth payload called illdeed, granting root access through a controlled chroot environment.

PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability

yaleman/cve-2025-24813-poc

CVE-2025-32462 Exploit

CVE-2025-32462 exploit code

CVE-2024-48061 Langflow vulnerable to remote code execution. Poc

A Writeup for Sleirsgoevy's version of the Exploit Implementation of CVE-2018-4386 by Fire30 called Bad_Hoist

iamgithubber/CVE-2025-6018-19-exploit

This script checks for the presence of the **CVE-2025-20281** vulnerability in Cisco Identity Services Engine (ISE) and ISE-PIC, which allows **unauthenticated remote code execution (RCE)** as root due to insufficient input validation in a specific API.

Multi-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV reporting and exploit stubs.

Exploit for CVE-2025-6019

MCP-Inspector-vulncheck is a Python script that checks if an MCP Inspector server is vulnerable to CVE-2025-49596. It tests whether the /sse endpoint responds to unauthenticated requests, indicating a potential security flaw. The script is simple to use and provides clear output on whether the target server is likely vulnerable or patched.

san8383/CVE-2025-32463

A easy sudo poc by cryingn.

Mr.CIA's manual patching guide for CVE-2025-32463 (Sudo local privilege escalation) on Kali Linux and Ubuntu WSL.

RARLAB WinRAR Directory Traversal Remote Code Execution

0xAkarii/CVE-2025-32463

Sudo Local Privilege Escalation CVE-2025-32463 (Best For Cases Where the shell is not stable to spawn a new root shell)

Local Privilege Escalation to Root via Sudo chroot in Linux

neko205-mx/CVE-2025-32463_Exploit

robbert1978/CVE-2025-32463_POC