Name		Name	Last commit message	Last commit date
parent directory ..
CVE-2012-0053		CVE-2012-0053
CVE-2014-0160--OpenSSL心脏滴血漏洞		CVE-2014-0160--OpenSSL心脏滴血漏洞
CVE-2015-1635		CVE-2015-1635
CVE-2017-11882		CVE-2017-11882
CVE-2017-16995 Ubuntu 16.04 本地提权漏洞		CVE-2017-16995 Ubuntu 16.04 本地提权漏洞
CVE-2017-17215		CVE-2017-17215
CVE-2018-2628 weblogic		CVE-2018-2628 weblogic
CVE-2018-2628-master		CVE-2018-2628-master
CVE-2018-5711-hanging-websites-by-a-harmful-gif		CVE-2018-5711-hanging-websites-by-a-harmful-gif
CVE-2019-0708--能够使用exp		CVE-2019-0708--能够使用exp
CVE-2019-10758--Mongo expres rce		CVE-2019-10758--Mongo expres rce
CVE-2019-1096		CVE-2019-1096
CVE-2019-18634		CVE-2019-18634
CVE-2019-9730		CVE-2019-9730
CVE-2020-16040		CVE-2020-16040
CVE-2020-2551		CVE-2020-2551
CVE-2020-28018		CVE-2020-28018
CVE-2020-9273		CVE-2020-9273
CVE-2021-3156		CVE-2021-3156
CVE-2021-3156_one_shot		CVE-2021-3156_one_shot
CVE-2021-3157		CVE-2021-3157
CVE-2022-21999		CVE-2022-21999
Exim		Exim
Java_Debug_Wire_Potocol_remote_code		Java_Debug_Wire_Potocol_remote_code
Memcrashed-DDoS-Exploit		Memcrashed-DDoS-Exploit
jad_1.5.8e_oob_write		jad_1.5.8e_oob_write
README.md		README.md

README.md

CVE Exploit PoC's

PoC exploits for multiple software vulnerabilities.

CVE-2019-18634 (LPE): Stack-based buffer overflow in sudo tgetpass.c when pwfeedback module is enabled
CVE-2021-3156 (LPE): Heap-based buffer overflow in sudo sudoers.c when an argv ends with backslash character.
CVE-2020-28018 (RCE): Exim Use-After-Free (UAF) in tls-openssl.c leading to Remote Code Execution
CVE-2020-9273 (RCE): ProFTPd Use-After-Free (UAF) leading to Post-Auth Remote Code Execution
jad OOB write (CE): JAD out-of-bounds write leading to code execution (No CVE given yet)