Catálogo de exploits

Investigating CVE-2022-36804

CVE-2025-55182 — React2Shell

Khai thác lỗ hổng bảo mật CVE-2025-55182

Technical investigation and host containment of a Critical-severity Zero-Click RCE exploit (CVE-2025-21298) using EDR telemetry and static malware analysis.

CVE-2026-32794: TLS Certificate Verification Bypass in Apache Airflow Databricks Provider

CVE-2018-7422

Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.

rocket-panda/CVE-2025-9074

Research-driven UPnP vulnerability scanner focusing on libupnp 1.6.19 and CVE-2012-5958.

Demonstration of the Heartbleed CVE (CVE-2014-0160), including lab setup instructions and source code to build your own Heartbleed lab for educational purposes

Lỗ hổng CVE-2025-64446 & CVE-2025-58034

By PrivacyHunter

폰트 인덱스 처리에서 발생하는 signed overflow 취약점

This room is based on exploiting the notorious Log4j vulnerability ( CVE-2021-44228), also referred to as the Log4Shell. The weakness enables attackers to execute a remote code via injection of the malicious payloads into the log messages.

This repository presents a comprehensive walkthrough of the Solar Exploiting Log4j room on TryHackMe, with a focus on understanding and exploiting the critical Log4Shell vulnerability (CVE-2021-44228).The process of triggering the exploit and gaining a reverse shell is explained in a practical and easy-to-follow manner.

This repository provides a detailed walkthrough of the *Solar Exploiting Log4j room* on TryHackMe, focusing on exploiting the critical Log4Shell vulnerability (CVE-2021-44228). The project demonstrates how attackers can leverage insecure logging mechanisms in Java applications to achieve remote code execution.

SALMA-ESSAOUD/CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis

Lab & PoC

A detailed penetration testing walkthrough and exploitation report for the 'Portal' machine, focusing on CVE-2011-2523 (vsFTPd 2.3.4 Backdoor) to achieve root access.

danilo1992-sys/CVE-2021-29447

CVE-2025-6934 Exploit Tool Unauthenticated Administrator Account Creation in WordPress Plugin Opal Estate Pro

Langflow at pre-CVE-2025-3248 fix commit for variant analysis benchmarking

Classic stack-based buffer overflow in SLMail 5.1 showing how early mail servers could be compromised through oversized SMTP and POP3 commands.

POC for CVE-2021-3156 - Heap-based buffer overflow in sudo

PoC Magento Session Reaper - CVE-2025-54236

tayW84/CVE-2019-10945----Python3

Performing multiple time-based blind injections for the same character and selecting the most frequent result significantly reduces errors and improves reliability, through it is time-consuming.

Classic stack-based buffer overflow in War FTP Daemon 1.65 demonstrating old-school remote code execution through malformed FTP commands.

Exploit based in /jaiguptanick/CVE-2019-0232

vsftpd 2.3.4 Backdoor Exploit (CVE-2011-2523)