Catálogo de exploits

A proof-of-concept exploit demonstrating local privilege escalation to root in sudo (CVE-2025-32463) by abusing the --chroot (-R) option and injecting a malicious NSS configuration

Intentionally vulnerable Next.js RSC Docker lab for CVE-2025-55182 (React2Shell) local testing

WinRAR < 7.13 path traversal for persistency

A Python 3 reimplementation of the classic CVE-2018-15473 OpenSSH user enumeration exploit, extended with multi-threading, wordlist support, automatic vulnerability detection, and thread-safe exploit patching.

Remote Code Execution on MCPJam Inspector <= 1.4.2

CVE write-up for Active Directory credential exposure vulnerability in Suprema BioStar 2

If you've been grinding through HackTheBox machines, Mailing is one of those boxes that genuinely teaches you something. It's rated Easy, runs on Windows, and chains together a few real-world vulnerabilities — a directory traversal, a credential leak, CVE-2024-21413, and a LibreOffice macro exploit. Let's walk through it step by step.

Khai thác lỗ hổng bảo mật CVE-2025-55182

Technical investigation and host containment of a Critical-severity Zero-Click RCE exploit (CVE-2025-21298) using EDR telemetry and static malware analysis.

Investigating CVE-2022-36804

Camera Dahua Research lỗ hổng CVE-2021-33044

CVE-2025-55182 — React2Shell

Exploit to MCPJam Inspector <=1.4.2

CVE-2026-32794: TLS Certificate Verification Bypass in Apache Airflow Databricks Provider

RandyNin/CVE-2023-4220

Research-driven UPnP vulnerability scanner focusing on libupnp 1.6.19 and CVE-2012-5958.

Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.

rocket-panda/CVE-2025-9074

CVE-2018-7422

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept (POC

By PrivacyHunter

Lỗ hổng CVE-2025-64446 & CVE-2025-58034

This repository provides a detailed walkthrough of the *Solar Exploiting Log4j room* on TryHackMe, focusing on exploiting the critical Log4Shell vulnerability (CVE-2021-44228). The project demonstrates how attackers can leverage insecure logging mechanisms in Java applications to achieve remote code execution.

This repository presents a comprehensive walkthrough of the Solar Exploiting Log4j room on TryHackMe, with a focus on understanding and exploiting the critical Log4Shell vulnerability (CVE-2021-44228).The process of triggering the exploit and gaining a reverse shell is explained in a practical and easy-to-follow manner.

This room is based on exploiting the notorious Log4j vulnerability ( CVE-2021-44228), also referred to as the Log4Shell. The weakness enables attackers to execute a remote code via injection of the malicious payloads into the log messages.

CVE-2026-23744 RCE in MCPJam inspector <= 1.4.2

H1sok444/CVE-2026-23744-PoC

폰트 인덱스 처리에서 발생하는 signed overflow 취약점

Demonstration of the Heartbleed CVE (CVE-2014-0160), including lab setup instructions and source code to build your own Heartbleed lab for educational purposes

SALMA-ESSAOUD/CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis