Catálogo de exploits

A PoC exploit for CVE-2025-32463 - Sudo Privilege Escalation

Chocapikk/CVE-2025-32463-lab

Proof of Concept for CVE-2025-32463 Local privilege escalation exploit targeting sudo -R on vulnerable Linux systems. For educational and authorized security testing only.

CVE-2025-32463

ibrahmsql/CVE-2021-41163

Grafana RCE

ibrahmsql/discourse-CVE-2021-41163

CitrixBleed2 poc

Royall-Researchers/CVE-2024-9264

Papercut Vulnerability, Affected Versions are PaperCut MF or NG version 8.0 or later (excluding patched versions) on all OS platforms.

cve-2025-32462' demo

Royall-Researchers/CVE-2025-24071

gmh5225/CVE-2025-6554

Mezzanine CMS 6.1.0 XSS (CVE-2025-50481)

gmh5225/CVE-2025-6554-2

r0otk3r/CVE-2021-41773

Memory disclosure vulnerability in Citrix NetScaler ADC and Gateway when configured as a Gateway (VPN virtual server, ICA proxy, CVPN, RDP Proxy).

CitrixBleed-2 (CVE-2025-5777) – proof-of-concept exploit for NetScaler ADC/Gateway “memory bleed”

POC to exploit WordPress 5.6-5.7 (PHP 8+) Authenticated XXE Injection.

Remote Command Execution exploit for Wing FTP Server (CVE-2025-47812)

Unauthenticated Remote Code Execution exploit for CVE-2025-20281 in Cisco ISE ERS API. Execute commands or launch reverse shells as root — no authentication required.

CVE-2025-41646 - Critical Authentication bypass

Exploit for CVE-2024-4040 – Authentication bypass in CrushFTP via CrushAuth cookie and AWS-style header spoofing. Stealthy Python PoC with secure token generation, SSL bypass, and improved output.

CVE-2023-46747-RCE PoC

🛡️ Proof of Concept (PoC) for CVE-2025-32463 - Local privilege escalation in sudo (versions 1.9.14 to 1.9.17). This exploit abuses the --chroot option and a malicious nsswitch.conf to execute arbitrary code as root. ⚠️ For educational and authorized testing only.

# CVE-2025-32463 – Sudo EoP Exploit (PoC) with precompiled .so

Privilege escalation exploit for CVE-2025-32463 using a malicious NSS module injected via sudo -R. This version creates a stealth payload called illdeed, granting root access through a controlled chroot environment.

🔓 Local privilege escalation PoC for CVE-2025-32462 (sudo -h bypass) – gain root via misconfigured sudoers

MCP-Inspector-vulncheck is a Python script that checks if an MCP Inspector server is vulnerable to CVE-2025-49596. It tests whether the /sse endpoint responds to unauthenticated requests, indicating a potential security flaw. The script is simple to use and provides clear output on whether the target server is likely vulnerable or patched.

Multi-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV reporting and exploit stubs.