[POC] CVE-2025-10035 — CVE-2025-10035Sep 21, 2025
pocexploitCVE-2025-10035
A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.
Detection for CVE-2025-10035
Google patched CVE-2025-10585, a Chrome V8 zero-day under active exploitation — here’s what it is, why it matters, and how to stay safe.
This repository includes two PoC scripts for CVE-2025-57819 in FreePBX: one to create a new admin user (poc_admin.py), and another to extract credentials using sqlmap (poc_auto_get_username_pass.py). For educational and authorized use only.
Information Disclosure in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to access user information via inspecting sent packages by user.
WinRAR漏洞CVE-2025-8088的payload一键生成工具
CVE-2025-8088 path traversal tool
PoC for achieving RCE in Langflow versions <1.3.0
[Pending]CVE-2025-59376, CVE-2025-59377
Langflow Remote Code Execution
Safe, read-only SQL Injection checker for FreePBX (CVE-2025-57819), using error/boolean/time-based techniques with per-parameter verdicts and JSON reporting.
A proof-of-concept exploit for WinRAR vulnerability (CVE-2025-8088) affecting versions 7.12 and lower. This tool creates a malicious RAR archive that embeds payloads in Alternate Data Streams (ADS) with path traversal, potentially leading to arbitrary code execution.
Proof of concept source code and misc files for my CVE-2025-21692 exploit, kernel version 6.6.75
CVE-2025-8088 path traversal tool
CVE-2025-53770 实验环境
CVE-2025-9776 — CatFolders WordPress Plugin: Authenticated SQL Injection via CSV Import | POC + Walkthrough
CVE-2025-48384-submodule
CVE-2024-6387 Exploit mit Reverse/Bind-Shell Support.
will delete later