Catálogo de exploits

Exploit for CVE-2024-4040 – Authentication bypass in CrushFTP via CrushAuth cookie and AWS-style header spoofing. Stealthy Python PoC with secure token generation, SSL bypass, and improved output.

A easy sudo poc by cryingn.

CVE-2025-32462 Exploit

CVE-2025-32462 exploit code

CVE-2024-48061 Langflow vulnerable to remote code execution. Poc

Sudo Local Privilege Escalation CVE-2025-32463 (Best For Cases Where the shell is not stable to spawn a new root shell)

PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability

san8383/CVE-2025-32463

yaleman/cve-2025-24813-poc

0xAkarii/CVE-2025-32463

Multi-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV reporting and exploit stubs.

This script checks for the presence of the **CVE-2025-20281** vulnerability in Cisco Identity Services Engine (ISE) and ISE-PIC, which allows **unauthenticated remote code execution (RCE)** as root due to insufficient input validation in a specific API.

Mr.CIA's manual patching guide for CVE-2025-32463 (Sudo local privilege escalation) on Kali Linux and Ubuntu WSL.

A Writeup for Sleirsgoevy's version of the Exploit Implementation of CVE-2018-4386 by Fire30 called Bad_Hoist

RARLAB WinRAR Directory Traversal Remote Code Execution

MCP-Inspector-vulncheck is a Python script that checks if an MCP Inspector server is vulnerable to CVE-2025-49596. It tests whether the /sse endpoint responds to unauthenticated requests, indicating a potential security flaw. The script is simple to use and provides clear output on whether the target server is likely vulnerable or patched.

Exploit for Local Privilege Escalation in Sudo via Malicious nsswitch.conf with sudo -R. (CVE-2025-32463)

Wing FTP Server RCE via Lua Injection

Local Privilege Escalation to Root via Sudo chroot in Linux

CVE-2025-6934 POC

Find out a modified Cacti public exploit!

neko205-mx/CVE-2025-32463_Exploit

B1gN0Se/Tomcat-CVE-2025-31650

zhaduchanhzz/CVE-2025-32463_POC

robbert1978/CVE-2025-32463_POC

This repository contains a Proof of Concept (PoC) exploit for the **CVE-2025-47175** vulnerability found in Microsoft PowerPoint. The vulnerability is a Use-After-Free (UAF) bug that allows an attacker to execute arbitrary code by tricking a user into opening a specially crafted PPTX file.

Python exploit for CVE-2021-41773 - Apache HTTP Server 2.4.49 Path Traversal vulnerability

SysMancer/CVE-2025-32463

MAVRICK-1/cve-2024-23113-test-env

DirtyPipe (CVE-2022-0847) exploit written in Rust