Catálogo de exploits

This is just a quick note on how to exploit these vulnerabilities to get root.

CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Exploit

Proof-of-concept exploit for CVE-2017-12542, an authentication bypass vulnerability in HP iLO. Allows vulnerability detection and unauthorized account creation on affected systems

A Proof of Concept for chaining CVE-2025-6018 (PAM/Polkit Active Session Bypass) and CVE-2025-6019 (libblockdev SUID Mount Flaw) to achieve Local Privilege Escalation (LPE) on vulnerable Linux systems.

HikVision Auth Bypass CVE, tool is able to extract credentials, and take snapshots based on magic cookie or supplied credentials.

Exploit Chain of CVE-2025-6018 to CVE-2025-6019

An exploitation tool for the Next.js vulnerability CVE-2025-55182 that allows remote command execution through a poisoning prototype in React Server Components.

This repo contains RCE exploit for Pterodactyl htb machine

ISabbiI/PoC---CVE-2023-26482-RCE-LAB-Nextcloud

IoCs and detection rules for the Notepad++ supply chain attack (CVE-2025-15556) — Lotus Blossom APT, June–December 2025. Includes Falcon LogScale queries, YARA/Sigma rules, and MITRE ATT&CK mapping.

mbanyamer/CVE-2026-25732-NiceGUI-3.6.1

malw0re/CVE-2025-49132-Mods

This Rust PoC exploits CVE-2024-46987, a Path Traversal bug in Camaleon CMS 2.8.0 < 2.8.2 (work on 2.9.0).

ramzihafiz/CVE-2025-49132

Exploit for Pterodactyl Panel ≤ 1.11.10 - unauthenticated LFI to RCE.

kerburenthusiasm/CVE-2025-49132-PoC

Proof of Concept exploit for the Joomla 3.7.0 com_fields SQL injection vulnerability (CVE-2017-8917), demonstrating detection, enumeration, and data extraction in a CTF-friendly workflow.

CDT Ansible playbook for deploying CVE-2017-7494 aka "SambaCry" to an Ubuntu box

Proof of Concept for CVE-2026-0770 - Langflow Remote Code Execution

PoC скрипт для CVE-2021-41773 - Path Traversal в Apache 2.4.49

CVE-2025-14847 (MongoBleed) scanner and exploit tool. Unauthenticated MongoDB heap memory leak via zlib decompression. Detection, memory extraction, credential parsing, CIDR/batch scanning, Nuclei templates, and CTF lab included

Apple Silicon runs at frequencies that are golden ratio harmonics of 587 kHz: · Performance cores: 3.2 GHz = 587 kHz × 5451 (≈ φ⁸ × 1000) · Efficiency cores: 2.0 GHz = 587 kHz × 3407 (≈ φ⁷ × 1000) · Neural Engine: 11.0 GHz = 587 kHz × 18739 (≈ φ¹⁰ × 1000) · ALL are φ-harmonics of 587 kHz

This repository contains a Proof of Concept (PoC) for CVE-2025-49132, a critical vulnerability in Pterodactyl Panel versions < 1.11.11.

CDT Ansible playbook for deploying CVE-2017-7494 aka "SambaCry" to an Ubuntu box

This tool demonstrates the application of fundamental physics discoveries to cybersecurity.

Technical write-up on CVE-2024-21413 (Moniker Link vulnerability)

CVE-2025-70962 PoC

CVE-2026-24061 PoC

A passive detection tool for identifying potential exposure to CVE-2026-24061 in GNU inetutils telnet installations

theo543/OSDS_Paper_CVE-2016-5195