Exploit for security-research CVE-2025-2304 CVE-2025-57819 CVE-2026-4480

## https://sploitus.com/exploit?id=5DDABBFC-F0C6-5FAB-B7AE-841D4EB78E0A
# security-research

Personal CVE PoC repository — exploit scripts, technical analysis, and mitigation notes for vulnerabilities discovered during HackTheBox, CTF, and independent research.

---

## CVE Index

| CVE | Description | Severity | Affected Software | Machine |
|-----|-------------|----------|-------------------|---------|
| [CVE-2026-4480](./CVE-2026-4480/) | Samba `%J` print job name shell injection — Unauthenticated RCE via print spooler | 🔴 Critical | Samba (printing subsystem) | HTB — Abducted |
| [CVE-2025-57819](./CVE-2025-57819/) | FreePBX unauthenticated remote code execution | 🔴 Critical | FreePBX | HTB — Connected |
| [CVE-2025-2304](./CVE-2025-2304/) | Camaleon CMS mass assignment — role escalation to admin via `permit!` | 🟠 High | Camaleon CMS < 2.9.1 | HTB — Facts |

---

## Repository Structure

```
security-research/
├── CVE-2026-4480/
│   ├── exploit/
│   │   └── cve-2026-4480.py
│   ├── docs/
│   │   └── analysis.md
│   └── README.md
├── CVE-2025-57819/
│   ├── exploit/
│   ├── docs/
│   │   └── analysis.md
│   └── README.md
├── CVE-2025-2304/
│   ├── exploit/
│   │   └── cve-2025-2304.py
│   ├── docs/
│   │   └── analysis.md
│   └── README.md
└── README.md
```

---

## Usage

Each CVE folder contains its own `README.md` with full usage instructions, prerequisites, and mitigation notes.

Quick start for any exploit:

```bash
cd CVE-XXXX-XXXXX/exploit
pip install -r requirements.txt   # if present
python3 cve-XXXX-XXXXX.py --help
```

---

## Disclaimer

All tools and PoCs in this repository are provided for **educational purposes and authorised security testing only**. Usage against systems without explicit written permission is illegal. The author accepts no responsibility for misuse.

---

## Author

**Exploitnotes** — Offensive security practitioner | HackTheBox | CTF player

[![HTB](https://img.shields.io/badge/HackTheBox-9FEF00?style=flat&logo=hackthebox&logoColor=black)](https://app.hackthebox.com)