Exploits

compiled poc binary

Detection for CVE-2025-61882

CVE-2025-60787 Poc - RCE - MotionEye <= 0.43.1b4

This repository contains ZAARA's implementation of the exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. This tool demonstrates advanced exploitation techniques while maintaining operational security.

🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.

CVE-2025-8088 based path traversal tool

CVE-2025-56807: A Stored Cross Site Scripting (XSS) vulnerability was discovered in FairSketch RISE Ultimate Project Manager & CRM (v3.9.4) in the File Manager functionality.

CVE-2025-10035_GoAnywhere Get RCE

CVE-2025-8088 based path traversal tool

CVE-2025-51591 Pandoc SSRF vulnerability Proof of Concept

CVE-2025-8088 exploit C++ impl

Microsoft HEIF Extension (msheif_store.dll) OOB-read

CVE-2025-57174 Unauthenticated Remote Command Execution

🚨 Exploit WinRAR CVE-2025-8088 with this PoC RAR archive, demonstrating the vulnerability and its impact when executed on the affected software.

Proof-of-concept script for CVE-2020-3452 — Cisco ASA/FTD Path Traversal vulnerability. Supports automated extraction of known file targets with a hard limit on successful downloads for safety. Intended for authorized security testing and research purposes only.

🔍 Scan for potential exposure to the critical SharePoint vulnerability CVE-2025-53770 with this simple and effective tool for authorized testing.

CVE-2020-0796 (SMBGhost) is a critical RCE vulnerability in Windows 10 SMBv3 protocol. It allows attackers to execute code remotely via crafted SMB packets, making it wormable. Affects Windows 10 v1903/v1909 and Server 2019. Exploit targets srv2.sys via buffer overflow

CVE-2025-8088 path traversal tool