Catálogo de exploits

Unauthenticated Remote Code Execution exploit for CVE-2025-20281 in Cisco ISE ERS API. Execute commands or launch reverse shells as root — no authentication required.

yaleman/cve-2025-24813-poc

RARLAB WinRAR Directory Traversal Remote Code Execution

CVE-2025-32462 exploit code

CVE-2025-32462 Exploit

A easy sudo poc by cryingn.

A Writeup for Sleirsgoevy's version of the Exploit Implementation of CVE-2018-4386 by Fire30 called Bad_Hoist

Multi-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV reporting and exploit stubs.

CVE-2024-48061 Langflow vulnerable to remote code execution. Poc

This script checks for the presence of the **CVE-2025-20281** vulnerability in Cisco Identity Services Engine (ISE) and ISE-PIC, which allows **unauthenticated remote code execution (RCE)** as root due to insufficient input validation in a specific API.

MCP-Inspector-vulncheck is a Python script that checks if an MCP Inspector server is vulnerable to CVE-2025-49596. It tests whether the /sse endpoint responds to unauthenticated requests, indicating a potential security flaw. The script is simple to use and provides clear output on whether the target server is likely vulnerable or patched.

PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability

Mr.CIA's manual patching guide for CVE-2025-32463 (Sudo local privilege escalation) on Kali Linux and Ubuntu WSL.

Sudo Local Privilege Escalation CVE-2025-32463 (Best For Cases Where the shell is not stable to spawn a new root shell)

san8383/CVE-2025-32463

0xAkarii/CVE-2025-32463

zhaduchanhzz/CVE-2025-32463_POC

Exploit for Local Privilege Escalation in Sudo via Malicious nsswitch.conf with sudo -R. (CVE-2025-32463)

neko205-mx/CVE-2025-32463_Exploit

Local Privilege Escalation to Root via Sudo chroot in Linux

SysMancer/CVE-2025-32463

robbert1978/CVE-2025-32463_POC

This repository contains a Proof of Concept (PoC) exploit for the **CVE-2025-47175** vulnerability found in Microsoft PowerPoint. The vulnerability is a Use-After-Free (UAF) bug that allows an attacker to execute arbitrary code by tricking a user into opening a specially crafted PPTX file.

MAVRICK-1/cve-2024-23113-test-env

Find out a modified Cacti public exploit!

CVE-2025-6934 POC

Python exploit for CVE-2021-41773 - Apache HTTP Server 2.4.49 Path Traversal vulnerability

Wing FTP Server RCE via Lua Injection

B1gN0Se/Tomcat-CVE-2025-31650

Detects Apache HTTP Server path traversal vulnerabilities (CVE-2021-41773, CVE-2021-42013) by checking for exposure of /etc/passwd through various traversal techniques.