Catálogo de exploits

Remote Code Execution on MCPJam Inspector <= 1.4.2

NeoArtemis37/OverlayFS-PrivEsc-CVE-2022-0944

PoC for CVE-2025-49596 on linux targets

Advanced security research on CVE-2025-55182 (React2Shell). Features an exploitation framework with 6 functional impact scenarios (RCE to Secret Exfiltration), an interactive reverse shell, and a complete laboratory. Portfolio piece demonstrating deep analysis of Prototype Pollution and Insecure Deserialization in React Server Components

CVE write-up for Active Directory credential exposure vulnerability in Suprema BioStar 2

Intentionally vulnerable Next.js RSC Docker lab for CVE-2025-55182 (React2Shell) local testing

If you've been grinding through HackTheBox machines, Mailing is one of those boxes that genuinely teaches you something. It's rated Easy, runs on Windows, and chains together a few real-world vulnerabilities — a directory traversal, a credential leak, CVE-2024-21413, and a LibreOffice macro exploit. Let's walk through it step by step.

A proof-of-concept exploit demonstrating local privilege escalation to root in sudo (CVE-2025-32463) by abusing the --chroot (-R) option and injecting a malicious NSS configuration

WinRAR < 7.13 path traversal for persistency

Master's Thesis research on CVE-2024-30051 (Windows DWM Heap Overflow). Features a high-reliability exploit with automated heap spray optimization, real-time logging, and empirical success-rate analysis. Portfolio piece demonstrating advanced Windows binary exploitation, heap layout manipulation, and LPE via Desktop Window Manager.

pream-totaram/CVE-2024-52302-reproduction

Researched and executed real-world CVE exploits in a controlled sandbox: CVE-2000-0168 DoS on Windows 95, ARP Spoofing with NTLMv2 credential interception on Windows XP, and Shellshock RCE via Burp Suite. All activities performed legally for educational purposes.

CVE-2025-55182 — React2Shell

Khai thác lỗ hổng bảo mật CVE-2025-55182

Camera Dahua Research lỗ hổng CVE-2021-33044

Investigating CVE-2022-36804

Exploit to MCPJam Inspector <=1.4.2

RandyNin/CVE-2023-4220

Technical investigation and host containment of a Critical-severity Zero-Click RCE exploit (CVE-2025-21298) using EDR telemetry and static malware analysis.

CVE-2026-32794: TLS Certificate Verification Bypass in Apache Airflow Databricks Provider

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept (POC

Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.

Research-driven UPnP vulnerability scanner focusing on libupnp 1.6.19 and CVE-2012-5958.

CVE-2018-7422

rocket-panda/CVE-2025-9074

H1sok444/CVE-2026-23744-PoC

Lỗ hổng CVE-2025-64446 & CVE-2025-58034

CVE-2026-23744 RCE in MCPJam inspector <= 1.4.2

This repository provides a detailed walkthrough of the *Solar Exploiting Log4j room* on TryHackMe, focusing on exploiting the critical Log4Shell vulnerability (CVE-2021-44228). The project demonstrates how attackers can leverage insecure logging mechanisms in Java applications to achieve remote code execution.

폰트 인덱스 처리에서 발생하는 signed overflow 취약점