Catálogo de exploits

CVE-2024-3094 exposed a backdoor in the XZ compression library, allowing remote SSH access by bypassing authentication. It’s a major supply chain attack affecting Linux systems, highlighting risks in trusted open-source components.

Ash1996x/CVE-2025-54914-PoC

GIT vulnerability | Carriage Return and RCE on cloning

For CTF's and Safe Environments.... CVE-2021-4034 Local PrivEsc.

Detection for CVE-2025-42944

In-depth study of CVE-2019-18935 affecting Telerik UI for ASP.NET AJAX. Covers .NET deserialization vulnerability, RadAsyncUpload handler, gadget chains, mixed-mode assembly exploitation, and mitigation strategies.

exploit of CVE-2022-0847 which directly remove password of the root account

initial-access

local

A hands-on simulation of CVE-2017-5638 (Apache Struts2 RCE), showcasing exploit reproduction, OS-level command execution, and mitigations such as input sanitization and endpoint monitoring. Built in Python/Flask with Jupyter notebook demos

infoleak

local

This repository contains **research and analysis** related to CVE-2025-29927. It demonstrates safe, controlled testing approaches for a path traversal/middleware misconfiguration vulnerability in web applications.

CVE-2025-24893 RCE exploit for XWiki with reverse shell capability

infoleak

local

initial-access

PoC CVE-2025-31161 - Authentication Bypass CrushFTP

initial-access

Zuack55/Roundcube-1.6.10-Post-Auth-RCE-CVE-2025-49113-

Nexus Repository 3 Path Traversal (CVE-2024-4956)

initial-access

Jenkins CLI arbitrary file read (CVE-2024-23897)

To check for vulnerability CVE-2019-13272

CVE‑2025‑42957 exposes an RFC‑enabled SAP S/4HANA module that lets low‑privileged users inject ABAP code to create admin accounts and gain full control. The article explains the vulnerability, threat model, provides minimal exploit ABAP code, and lists patching & monitoring steps to secure the system

Linux privilege escalation using Dirty COW exploit (CVE-2016-5195).

This is a tiny lab that simulates the core idea reported for CVE-2025-54236 (“SessionReaper”)

Advanced network penetration testing toolkit with SSH vulnerability assessment, CVE-2018-15473 exploitation, stealth brute force capabilities, and fail2ban evasion techniques. Professional-grade security testing framework for authorized penetration testing engagements.

This repository contains the corrected code for CVE: 2019-9053

initial-access