haile01 / perl_spreadsheet_excel_rce_poc
POC for RCE vulnerability in ParseExcel library, and ParseXLSX too, as a depending library
☆14Updated last year
Related projects: ⓘ
- xortigate-cve-2023-27997☆61Updated 11 months ago
- An exploit for CVE-2022-42475, a pre-authentication heap overflow in Fortinet networking products☆31Updated last year
- Apt style exploitation of Chrome 0day CVE-2023-4357☆42Updated 10 months ago
- This repository offers insights and a proof-of-concept tool to exploit two significant deserialization vulnerabilities in Inductive Autom…☆44Updated 8 months ago
- DHCP Server Remote Code Execution impact: 2008 R2 SP1 до Server 2019☆69Updated last year
- ☆18Updated 5 months ago
- Exploit for CVE-2024-20767 - Adobe ColdFusion☆33Updated 5 months ago
- CVE-2023-21554 Windows MessageQueuing PoC，分析见 https://www.zoemurmure.top/posts/cve_2023_21554/☆53Updated last year
- A vulnerability within Microsoft Office's wwlib allows attackers to achieve remote code execution with the privileges of the victim that …☆59Updated last year
- pocs & exploit for CVE-2023-24871 (rce + lpe)☆44Updated 2 months ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆19Updated 7 months ago
- Utility for creating ZipSlip archives☆66Updated last year
- ☆151Updated last year
- ☆66Updated this week
- PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy☆35Updated 10 months ago
- ZDI presentations, publications, whitepapers etc☆43Updated 11 months ago
- ☆76Updated 5 months ago
- ☆39Updated this week
- Scalpel is a Burp extension for intercepting and rewriting HTTP traffic, either on the fly or in the Repeater using Python 3 scripts.☆51Updated 3 months ago
- ☆45Updated 2 years ago
- VMWare Aria Operations for Networks (vRealize Network Insight) Static SSH key RCE (CVE-2023-34039)☆95Updated last year
- Shielder's public proof of concepts collection☆22Updated 2 weeks ago
- PoC Exploit for VM2 Sandbox Escape Vulnerability☆47Updated 9 months ago
- Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace (v8ctf submission)☆69Updated 3 months ago
- Proof of Concept Code for CVE-2023-32353: Local privilege escalation via iTunes in Windows☆34Updated last year
- SonicWall SMA-100 Unauth RCE Exploit (CVE-2021-20038)☆91Updated 2 years ago
- Exploiting XXE Vulnerabilities on Microsoft SharePoint Server and Cloud via Confused URL Parsing☆29Updated 3 months ago
- This is a pre-authenticated RCE exploit for VMware vRealize Operations Manager☆48Updated 11 months ago
- CVE-2021-42342 RCE☆42Updated 2 years ago
- A simple mutator engine which focuses on finding unknown classes of injection vulnerabilities☆63Updated 6 months ago