lockedbyte/CVE-Exploits
FreePoC exploits for software vulnerabilities
FreeFree tier
About lockedbyte/CVE-Exploits
A collection of proof-of-concept exploit code for multiple software vulnerabilities, hosted on GitHub. Includes exploits for CVE-2019-18634 (stack-based buffer overflow in sudo tgetpass.c), CVE-2021-3156 (heap-based buffer overflow in sudo sudoers.c), CVE-2020-28018 (Use-After-Free in Exim tls-openssl.c leading to remote code execution), CVE-2020-9273 (Use-After-Free in ProFTPd leading to post-auth remote code execution), and jad out-of-bounds write (no CVE assigned). The exploits are primarily written in C and are intended for security research, penetration testing, and educational purposes.
Key Features
Proof-of-concept exploit code for multiple software vulnerabilities
Includes exploits for CVE-2019-18634, CVE-2021-3156, CVE-2020-28018, CVE-2020-9273, and jad OOB write
Primarily written in C (75.7%) with supporting Shell, HTML, and other languages
Open source repository hosted on GitHub
Provides detailed descriptions and vulnerability context in the README
Pros & Cons
Pros
- Working PoC exploits for several high-profile CVEs
- Open source and freely available on GitHub
- Includes both local privilege escalation (LPE) and remote code execution (RCE) exploits
- Structured repository with separate directories per vulnerability
Cons
- Limited to a specific set of CVEs; not a general-purpose exploit tool
- Requires understanding of exploitation and system internals to use effectively
- Some exploits may be patched on up-to-date systems
Best For
Security research and vulnerability analysisPenetration testing and red team exercisesEducational demonstrations of exploit techniquesTesting and validating security patches
FAQ
What vulnerabilities are covered by this repository?
The repository covers CVE-2019-18634 (sudo LPE), CVE-2021-3156 (sudo LPE), CVE-2020-28018 (Exim RCE), CVE-2020-9273 (ProFTPd RCE), and jad out-of-bounds write (no CVE).
Is this tool free to use?
Yes, the repository is public and free to access on GitHub. No payment is required.
What programming languages are used?
The repository is primarily written in C (75.7%), with additional Shell scripts, HTML, and other supporting files.