Catálogo de exploits

client-side

CitrixBleed-2 (CVE-2025-5777) – proof-of-concept exploit for NetScaler ADC/Gateway “memory bleed”

initial-access

initial-access

initial-access

client-side

initial-access

initial-access

remote-with-credentials

client-side

Mr.CIA's manual patching guide for CVE-2025-32463 (Sudo local privilege escalation) on Kali Linux and Ubuntu WSL.

Sudo Local Privilege Escalation CVE-2025-32463 (Best For Cases Where the shell is not stable to spawn a new root shell)

san8383/CVE-2025-32463

0xAkarii/CVE-2025-32463

This script checks for the presence of the **CVE-2025-20281** vulnerability in Cisco Identity Services Engine (ISE) and ISE-PIC, which allows **unauthenticated remote code execution (RCE)** as root due to insufficient input validation in a specific API.

RARLAB WinRAR Directory Traversal Remote Code Execution

PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability

MCP-Inspector-vulncheck is a Python script that checks if an MCP Inspector server is vulnerable to CVE-2025-49596. It tests whether the /sse endpoint responds to unauthenticated requests, indicating a potential security flaw. The script is simple to use and provides clear output on whether the target server is likely vulnerable or patched.

CVE-2025-32462 Exploit

A easy sudo poc by cryingn.

CVE-2025-32462 exploit code

yaleman/cve-2025-24813-poc

A Writeup for Sleirsgoevy's version of the Exploit Implementation of CVE-2018-4386 by Fire30 called Bad_Hoist

iamgithubber/CVE-2025-6018-19-exploit

Exploit for CVE-2025-6019

local

local

Multi-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV reporting and exploit stubs.

initial-access

local