Every new exploit,
on the radar.

Device-bound CVE-2026-64560 adaptation for Xiaomi 15 dada OS4.0.0.8

OnePlus Ace 6 temporary root tool (CVE-2026-64560) - device-verified port with corrected bootidParent address

Exploit of CVE-2026-64560 for kernelCTF, LTS-6.12.95

CVE-2026-64560 toolkit: Go single-binary toolchain + realme RMX5010 (A16, SM8750) target port

针对 OnePlus Ace6 设备的 cve-2026-64560 复现

A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability.

One command to fix CVE-2025-66478 (React 2 Shell RCE) in your Next.js / React RSC app.

React2Shell Ultimate - The most comprehensive CVE-2025-66478 Scanner for Next.js RSC RCE vulnerability. Multi-mode detection, WAF bypass, local scanning.

React2Shell - CVE-2025-66478 RCE Exploit

CVE-2025-66478 Proof of Concept

🛡️ Audit your Next.js & React Server Components stack for critical vulnerabilities (CVE-2025-66478, CVE-2025-55184). Detects risks & generates fix commands. 10…

My attempt to make honeypot for React2Shell vulnerability (CVE-2025-66478)

CVE-2025-49844 (RediShell)

CVE-2025-49844 – Redis Lua Parser Use-After-Free

Proof-of-concept for CVE-2025-49844

🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.

CVE-2025-49844 POC

🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.

Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463

Local Privilege Escalation to Root via Sudo chroot in Linux

Privilege escalation to root using sudo chroot, NO NEED for gcc installed.

CVE-2025-32463 Proof of concept

This CVE addresses a vulnerability in sudo versions 1.9.14 to 1.9.17, enabling unauthorized local privilege escalation to root access.

PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability

# CVE-2025-32463 – Sudo EoP Exploit (PoC) with precompiled .so

A deep dive into two critical Sudo vulnerabilities (CVE‑2025‑32463 & CVE‑2025‑32462) that enable local privilege escalation across major Linux distributions.

GhostLock One-Tap Execution App (CVE-2026-43499)

KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499

Jailbreak supported Google Pixel phones with CVE-2026-43499

GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader

CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k

KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 / 6.6 / 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo/iQOO、小米、三星、Pixel 等）离线可用、按机…

CVE-2026-43499 PoC

Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

A public open sourced tool. Log4J scanner that detects vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046, etc) on your file-system within any applicat…

An agent to hotpatch the log4j RCE from CVE-2021-44228.

CVE-2026-64561

Guest-to-host KVM/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers.

Zapscape (CVE-2026-64561) KVM/x86 shadow MMU UAF guest-to-host escape PoC mirror — V4bel/@v4bel, MIT; for authorized security testing

Generic kernel live patch for the KVM/x86 shadow-MMU use-after-free (Zapscape, CVE-2026-64561)

Tracking Zapscape (CVE-2026-64561), the KVM/x86 shadow-MMU guest-to-host escape

Exploit KVM/x86 guest-to-host escape CVE-2026-64561 with Zapscape, a proof-of-concept demonstrating hypervisor vulnerability.

Linux 内核升级指南 - 修复 CVE-2026-64561

Guest-to-host KVM/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers.

Am I fixed? Was I hacked? Read-only checker for Citrix NetScaler CTX697096 (CVE-2026-88771–88778), CTX697174 (CVE-2026-88779) and CTX697191 (CVE-2026-107406, S…

Tooling related to CVE-2026-88771 and CVE-2026-88772

Defensive security checker for Citrix NetScaler ADC & Gateway — CVE-2026-88771 through CVE-2026-88778

Improper Input Validation (CWE-20) SSVC Scores Exploitation: Active Technical Impact: Total

A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.

A detection/hunting script for compromise related to CVE-2026-88771

Windows privilege escalation using RegPwn

Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions

Brute Ratel C4 BOF of the CVE-2026-24291

About 2026 Guide: Bypass User Account Control Prompts on Windows 11

PoC

PoC for the "Windows Notepad RCE"

CVE-2026-20841

🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.

PoC for a remote code execution flaw in Windows Notepad's markdown renderer. The markdown engine does not restrict URL protocols, allowing arbitrary protocol h…

out-of-bounds write in Fortinet FortiOS CVE-2024-21762 vulnerability

Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762

Chequea si tu firewall es vulnerable a CVE-2024-21762 (RCE sin autenticación)

The PoC demonstrates the potential for remote code execution by exploiting the identified security flaw.

Proof-of-concept scanner targeting CVE-2024-21762 in FortiOS SSL VPN’s /remote/hostcheck_validate endpoint with reverse shell payload delivery.

The FortiGate SSL-VPN pot of gold. CVE-2024-21762 and CVE-2023-27997. 79 working exploit clients. 53 hardware SKUs. 55 FortiOS builds.

This script performs vulnerability scanning for CVE-2024-21762, a Fortinet SSL VPN remote code execution vulnerability. It checks whether a given server is vul…

Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing

xortigate-cve-2023-27997

POC FortiOS SSL-VPN buffer overflow vulnerability

Search vulnerable FortiOS devices via Shodan (CVE-2023-27997)

The FortiGate SSL-VPN pot of gold. CVE-2024-21762 and CVE-2023-27997. 79 working exploit clients. 53 hardware SKUs. 55 FortiOS builds.

A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager

PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)

Research repository tracking affected IPs from the Fortigate CVE-2022-40684 configuration leak by Belsen Group

Bash PoC for Fortinet Auth Bypass - CVE-2022-40684

Exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager

An authentication bypass using an alternate path or channel in Fortinet product

CVE-2018-13379

CVE-2018-13379 Script for Nmap NSE.

This module massively scan and exploit a path traversal vulnerability in the FortiOS SSL VPN web portal may allow an unauthenticated attacker to download Forti…

Fortinet FortiOS路径遍历漏洞 （CVE-2018-13379）批量检测脚本

CVE-2018-13379 Exploit

FortiVuln

Fortigate CVE-2018-13379 - Tool to search for vulnerable Fortigate hosts in Rapid7 Project Sonar data anonymously through The Tor network.

CVE-2018-13379 fortiOS vulnerability POC

Netlogon and CLDAP vulnerability research with a proof of concept.

CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing.

Technical analysis and Proof-of-Concept (PoC) for CVE-2026-41089, a critical unauthenticated Remote Code Execution (RCE) vulnerability in the Windows Netlogon …

CVE-2026-41089 checker: unauthenticated, non-destructive detection for the Netlogon CLDAP stack buffer overflow (CVSS 9.8). Reports whether a domain controller…

CVE-2026-41089 是 Windows Netlogon 服务中一个关键的远程代码执行漏洞，单包即可崩溃 lsass.exe，导致域控制器在约 30-60 秒内重启。此期间该 DC 的所有域认证将失败。

CVE-2026-41089

🛡️ Official AI Security Tool diagnostic module for CVE-2026-41089 (Windows Netlogon Stack Buffer Overflow RCE). Features technical writeup, attack architecture…

Scan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.

Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.

BitLocker TPM+PIN Hardening Against CVE-2026-45585 (YellowKey)

YellowKey BitLocker recovery audits CVE-2026-45585: yellowkey github, TPM, recovery key backup. Windows 10/11 CLI GUI, portable audit tool for volumes you own.…

Intune Remediation package for the CVE-2026-45585 YellowKey BitLocker/WinRE bypass mitigation described in the provided procedure. This package removes `autof…

CVE-2026-45585

A small script to apply Yellowkey mitigation based on CVE-2026-45585 instructions

YellowKey | BitLocker Bypass Vulnerability (CVE-2026-45585)

YellowKey | BitLocker Bypass CVE-2026-45585 | Detect & Fix Automatically via Microsoft Intune

🐱‍💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱‍💻

Nexus Repository Manager 3 Remote Code Execution without authentication < 3.15.0

Some debug notes and exploit(not blind)

CVE-2019-7238 Nexus RCE漏洞图形化一键检测工具。CVE-2019-7238 Nexus RCE Vul POC Tool.

nmap scripts for vuln cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327

RCE

Vulhub nexus/CVE-2019-7238: Nexus Repository Manager 3 JEXL Injection RCE (CVE-2019-7238), run with Isoloom

Exploit for CVE-2021-3129

Laravel <= v8.4.2 debug mode: Remote code execution (CVE-2021-3129)

Laravel RCE Exploit PoC - CVE-2021-3129 (user-friendly with automatic log path detection)

Laravel debug rce

Exploit for CVE-2021-3129

Laravel Debug mode RCE漏洞（CVE-2021-3129）poc / exp

CVE-2026-10520

CVE-2026-10520 and CVE-2026-10523

Root-Level RCE via OS Command Injection in Ivanti Sentry

Patch: OGNL injection (Apache Struts)

Exploit for CVE-2026-10520 | Ivanti Sentry - OS Command Injection

CVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE). Because the tool listens on 0.0.0.0 by default, …

MCPJam inspector contains a remote code execution

A proof-of-concept exploit for CVE-2026-23744 - MCPJam Inspector Remote Code Execution (RCE) vulnerability. This tool demonstrates the security flaw in version…

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept (POC

MCPJam Inspector is a local-first development platform for MCP servers. In versions 1.4.2 (and earlier), a RCE flaw lets attackers send crafted HTTP request th…

CVE-2026-23744 is an unauthenticated command injection in MCPJam Inspector ≤1.4.2 via /api/mcp/connect. This POC exploits it by sending a crafted JSON payload …

Exploit to MCPJam Inspector <=1.4.2

PoC for CVE-2026-23744, demonstrating an unauthenticated RCE in MCPJam Inspector (<= 1.4.2).

Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code

Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori / Xint.

A Go implementation of copyfail (CVE-2026-31431)

PoC: fully unprivileged container escape to node-level code execution on Kubernetes via CVE-2026-31431 page-cache corruption + shared image layers. Validated o…

CVE-2026-31431 纯文件利用

Most Linux LPEs need a race window or a kernel-specific offset. Copy Fail is a straight-line logic flaw, it needs neither. The same 732-byte Python script (or …

CVE-2026-31431-killed page-cache exploit — code exec into containers sharing the same image layer

Minimal no-libc Linux x86_64 ELF PoC build for Copy Fail (CVE-2026-31431)

CVE-2019-15107 Webmin RCE (unauthorized)

poc exploit for webmin backdoor (CVE-2019-15107 and CVE-2019-15231)

CVE-2019-15107 exploit

Webmin <=1.920 RCE

CVE-2019-15107 webmin python3

Remote Code Execution Vulnerability in Webmin

CVE-2019–15107 - Unauthenticated RCE Webmin <=1.920

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020…

CVE-2020–14882、CVE-2020–14883

CVE-2020-14882_ALL综合利用工具，支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。

CVE-2020–14882 by Jang

CVE-2020-14882/14883/14750

CVE-2020-14882 Weblogic-Exp

CodeTest信息收集和漏洞利用工具，可在进行渗透测试之时方便利用相关信息收集脚本进行信息的获取和验证工作，漏洞利用模块可选择需要测试的漏洞模块，或者选择所有模块测试，包含CVE-2020-14882, CVE-2020-2555等，可自己收集脚本后按照模板进行修改。

CVE-2020-14882批量验证工具。

Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具，采用JDK 1.8+NetBeans8.2开发，软件运行必须安装JDK 1.8或者以上版本。 支持：weblogic xml反序列化漏洞 CVE-2017-10271/CNVD-C-2019-48814/CVE-2019-2725检查。

WebLogic Exploit

Oracle WebLogic WLS-WSAT Remote Code Execution Exploit (CVE-2017-10271)

WebLogic CNVD-C-2019_48814 CVE-2017-10271 Scan By 7kbstorm

CVE-2019-2725poc汇总 更新绕过CVE-2017-10271补丁POC

CVE-2017-10271 WEBLOGIC RCE (TESTED)

WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote …

CVE-2017-10271 POC

CVE-2020-13942 unauthenticated RCE POC through MVEL and OGNL injection

CVE-2020-13942 POC + Automation Script

CVE-2020-13942 Apache Unomi 远程代码执行漏洞脚getshell

Apache Unomi CVE-2020-13942: RCE Vulnerabilities