Exploits

[Pending]CVE-2025-59376, CVE-2025-59377

Langflow Remote Code Execution

Safe, read-only SQL Injection checker for FreePBX (CVE-2025-57819), using error/boolean/time-based techniques with per-parameter verdicts and JSON reporting.

A proof-of-concept exploit for WinRAR vulnerability (CVE-2025-8088) affecting versions 7.12 and lower. This tool creates a malicious RAR archive that embeds payloads in Alternate Data Streams (ADS) with path traversal, potentially leading to arbitrary code execution.

Proof of concept source code and misc files for my CVE-2025-21692 exploit, kernel version 6.6.75

CVE-2025-8088 path traversal tool

CVE-2025-53770 实验环境

CVE-2025-9776 — CatFolders WordPress Plugin: Authenticated SQL Injection via CSV Import | POC + Walkthrough

CVE-2025-48384-submodule

CVE-2024-6387 Exploit mit Reverse/Bind-Shell Support.

will delete later

might delete later

FreePBX versions 15, 16, and 17 contain a Remote Code Execution (RCE) vulnerability caused by insufficient sanitization of user-supplied data in endpoints.

BeyondCart Connector <= 2.1.0 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation 🚨 BeyondCart Connector <= 2.1.0 - JWT Privilege Escalation (CVE-2025-8570)

GIT vulnerability | Carriage Return and RCE on cloning

Authenticated 0-click RCE against Linux 6.1.45 for CVE-2023-52440 and CVE-2023-4130

CVE-2025-10720 PoC

For CTF's and Safe Environments.... CVE-2021-4034 Local PrivEsc.