Every new exploit,
on the radar.

Originally a Honeypot for CVE-2026-20131

CVE-2026-20131

Post-incident report on CVE-2026-20131 (CVSS 10.0), a Cisco FMC insecure deserialization vulnerability exploited by Interlock ransomware. Details root-cause an…

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari

exploit for cve-2025-43529

A demonstration of read write using cve-2025-43529 and userland PAC bypass on iOS 26.1

Root Cause Analysis for CVE-2025-43529, a UAF vulnerability due to incorrect DFG StoreBarrierInsertionPhase in JavaScriptCore.

CTT-Enhanced iOS Safari Exploit (based on CVE-2025-43529)

webkit_refraction.js (The 33-Layer WebGL Payload) ​This JavaScript payload uses the \alpha constant to create a high-frequency "Memory Shiver." It induces the …

CVE-2025-43529 Test

This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedd…

This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedde…

Python tool for CVE-2010-1240 research - generates malicious PDFs exploiting Adobe Reader Launch Actions

Writeup + CVE analysis + countermeasures for the Hacktivity 'Vulnerabilities, Exploits, and Remote Access Payloads' lab (netcat shells, Metasploit, CVE-2010-12…

A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APP_KEY of the Livewire project is known.

High-interaction honeypot mimicking a vulnerable Laravel/Livewire app. Captures RCE exploits and webshells targeting CVE-2024-47823, CVE-2025-54068, and CVE-20…

A tool designed to exploit CVE-2025-54068 and Remote Command Execution of the Livewire project.

Fast Python scanner detects vulnerable Laravel Livewire v3 sites (CVE-2025-54068, CVSS 9.2). Separates risky sites into vuln.txt, safe sites into safe.txt.

Test target: fresh Laravel 12 app with Livewire pinned to vulnerable 3.6.3 (CVE-2025-54068) for recon scanning

CVE-2026-19478 PoC . Unauthenticated remote code-injection in GitLab's GraphQL layer

Reproducible A/B lab + safe PoC for GitLab CVE-2026-19478 / CVE-2026-19650 (GraphQL @gl_introduced)

GitLab Code injection

Nuclei detection template for CVE-2026-19478, a critical (CVSS 9.4) unauthenticated arbitrary method invocation flaw in the GitLab GraphQL API,

CVE-2026-19478: GitLab GraphQL Vulnerability PoC

Python PoC script for pgAdmin4 Query Tool RCE (CVE-2025-2945)

pgAdmin Proof of Concept

Exploit and test stand for CVE-2025-2945

Authenticated RCE in pgAdmin 4 (8.10–9.1) via eval() injection in the Query Tool. This is an updated PoC with compatibility fixes for pgAdmin 9.x auth changes

Exploit for pgAdmin4 Remote Code Execution (RCE) vulnerability affecting versions 8.10 to 9.1.

PoC for CVE-2025-2945 — pgAdmin 4 authenticated eval() injection RCE, CVSS 9.9

CVE-2025-69212 - OpenSTAManager has an OS Command Injection in P7M File Processing

OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M (signed XML) file decoding function.

Python poc, exploit for CVE-2025-69212

CVE-2025-69212 - OpenSTAManager OS Command Injection PoC

CVE-2025-69212 Proof-of-concept. Authenticated RCE in OpenSTAManager ≤2.9.8 via malicious ZIP uploads containing crafted .p7m filenames.

Exploit to trigger RCE for CVE-2018-16763 on FuelCMS <= 1.4.1 and interactive shell.

Fuel CMS 1.4.1 - Remote Code Execution

Fuel CMS 1.4.1 - Remote Code Execution

A working PoC to CVE-2018-16763

This is an updated version of the CVE-2018-16763 for fuelCMS 1.4.1

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Executio…

POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon

An exploit for CVE-2022-42475, a pre-authentication heap overflow in Fortinet networking products

CVE-2022-42475 飞塔RCE漏洞 POC

FortiOS buffer overflow vulnerability

test for the ioc described for FG-IR-22-398

Proof of Concept (PoC) for research and controlled laboratory validation of CVE-2022-42475, a critical heap-based buffer overflow vulnerability affecting the S…

CVE-2026-50522 PoC

PoC, IOCs, and detection logic for the SharePoint /_trust WS-Federation BinaryFormatter deserialization chain. Lab reconstruction covering unauthenticated RCE,…

CVE-2026-50522

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Microsoft SharePoint CVE-2026-50522

Proof of concept for CVE-2019-0708

A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.

dump

3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)

An Attempt to Port BlueKeep PoC from @Ekultek to actual exploits

CVE-2019-0708-EXP-Windows版单文件exe版,运行后直接在当前控制台反弹System权限Shell

Public work for CVE-2019-0708

ispy V1.0 - Eternalblue(ms17-010)/Bluekeep(CVE-2019-0708) Scanner and exploit ( Metasploit automation )

Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487

Tool for testing mitigations and exposure to Rapid Reset DDoS (CVE-2023-44487)

Proof of concept for DoS exploit

A python based exploit to test out rapid reset attack (CVE-2023-44487)

Examples for Implementing cve-2023-44487 ( HTTP/2 Rapid Reset Attack ) Concept

Highly configurable tool to check a server's vulnerability against CVE-2023-44487 by rapidly sending HEADERS and RST_STREAM frames and documenting the server's…

Exploit for Grafana arbitrary file-read and RCE (CVE-2024-9264)

Grafana RCE exploit (CVE-2024-9264)

File Read Proof of Concept for CVE-2024-9264

A go implementation for CVE-2024-9264 which effect grafana versions 11.0.x, 11.1.x, and 11.2.x.

Authenticated RCE in Grafana (v11.0) via SQL Expressions - PoC Exploit

Grafana RCE

LiteSpeed Cache Privilege Escalation PoC

PoC for the CVE-2024 Litespeed Cache Privilege Escalation

LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000

CVE-2024-28000 Exploit for litespeed-cache =<6.3 allows Privilege Escalation with creation of administrator account

CVE-2024-28000 LiteSpeed Cache Privilege Escalation Scan&Exp

Hands-on exploit lab for CVE-2024-28000 — unauthenticated privilege escalation in LiteSpeed Cache (WordPress plugin, <=6.3.0.1). Spins up a vulnerable environm…

Hands-on reproduction of CVE-2024-28000 in LiteSpeed Cache using an isolated WordPress lab. Includes reconnaissance, vulnerable hash recovery, Administrator pr…

HikvisionExploiter is a Python-based utility designed to automate exploitation and directory accessibility checks on Hikvision network cameras exploiting the W…

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability t…

海康威视RCE漏洞 批量检测和利用工具

the metasploit script(POC) about CVE-2021-36260

CVE-2021-36260

CVE-2021-36260

HIKRAVEN - Advanced Hikvision Security Assessment Platform for professional penetration testing. Detects 12+ CVEs including CVE-2021-36260 (CRITICAL), tests de…

Identify hikvision ip and probe for cve-s (CVE-2017-7921, CVE-2022-28171, CVE-2021-36260)

Ninja Forms File Uploads <= 3.3.26 - Unauthenticated Arbitrary File Upload

POC

CVE-2026-0740

Ninja Forms File Uploads <= 3.3.26 - Unauthenticated Arbitrary File Upload to RCE (CVE-2026-0740)

CVE-2026-0740

PoC untuk CVE-2026-0740: Ninja Forms File Uploads <= 3.3.26 — Unauthenticated Arbitrary File Upload yang dapat mengarah ke RCE.

CVE-2026-26980 — Ghost CMS Content API SQL Injection Lab (unauthenticated blind SQLi via slug filter ordering)

CVE-2026-26980 - Ghost CMS Content API SQL Injection

💣 Exploit for CVE-2026-26980 — 👻 Ghost CMS Unauthenticated SQLi via Content API

Ghost Content API SQL Injection

Ghost CMS Content API Blind SQL Injection

Outdated Ghost CMS websites that have fallen become compromised from CVE-2026-26980 can suffer from spam code injection to pages. Use this to mass clear and ed…

PoC for CVE-2026-2005

CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit

PoC for CVE-2026-2005 — heap buffer overflow in PostgreSQL pgcrypto (pgp_pub_decrypt). Oversized PGP session key bypasses bounds check in pgp-pubdec.c. Affects…

CVE-2026-20896 Gitea Docker X-WEBAUTH-USER auth bypass checker

Public PoC and detector for CVE-2026-20896 ("Gitea Docker: One Header, Any User")

this is a modified POC of rz1027 for CVE-2026-20896

Gitea Docker Image Authentication Bypass

An explanation and PoC to exploit CVE-2026-20896 Authentication Bypass Vulnerability on Gitea. Being able to steal session tokens for valid users in the Gitea …

A real exploit for BitBucket RCE CVE-2022-36804

Multithreaded exploit script for CVE-2022-36804 affecting BitBucket versions <8.3.1

Somewhat Reliable PoC Exploit for CVE-2022-36804 (BitBucket Critical Command Injection)

A loader for bitbucket 2022 rce (cve-2022-36804)

A critical command injection vulnerability was found in multiple API endpoints of the Atlassian Bit bucket Server and Data center. This vulnerability affects a…

Bitbucket CVE-2022-36804 unauthenticated remote command execution

A simple PoC for Atlassian Bitbucket RCE [CVE-2022-36804]

Atlassian Bitbucket Server and Data Center - Command Injection Vulnerability (CVE-2022-36804)

CVE-2026-8181 - Burst Statistics 3.4.0-3.4.1.1 Unauthenticated Authentication Bypass to Admin Account Takeover | Proof of Concept

CVE-2026-8181 PoC: Burst Statistics (3.4.0–3.4.1.1) authentication bypass. Python tool — single & multi-target scans, threaded workers, TXT reports. Authorized…

Exploit for the CVE-2026-8181 - Burst Statistics WordPress Plugin Authentication Bypass

CVE-2026-8181 | Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover

CVE-2026-8181: Burst Statistics Auth Bypass → REST API takeover & admin creation. Python 2.7. Educational use only.

This vulnerability allows unauthenticated attackers who know a valid administrator username to impersonate that admin during REST API requests by using any inc…

The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass

Working implementation: cryptographically verified short-lived identities for AI decision authentication — CVE-2025-59536 (Patent Pending US 64/006,746)

Professional PoC for CVE-2025-59536 and related CVEs. Demonstrates an MCP Tool Confirmation Prompt Misrepresentation in Anthropic Claude_Code leading to arbitr…

Scan a repo for AI-IDE config files that can trigger RCE via Claude Code hooks, Cursor rules, MCP auto-registration. Detects CVE-2025-59536, CVE-2026-21852, CV…

Read-only safety scanner for Claude Code projects. Catches CVE-2025-59536, statusLine injection, prompt injection, and more.

Scan a repo's .claude/ config (settings.json hooks, MCP servers, env, allowed-tools) for the RCE & API-key-exfiltration footguns (CVE-2025-59536, CVE-2026-2185…

PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11, 16.4.1 and 16.5.0RC1.

CVE-2025-24893 is a critical unauthenticated remote code execution vulnerability in XWiki (versions < 15.10.11, 16.4.1, 16.5.0RC1) caused by improper handling …

XWiki SolrSearchMacros 远程代码执行漏洞PoC（CVE-2025-24893）

PoC exploits CVE-2025-24893 , a remote code execution (RCE) vulnerability in XWiki caused by improper sandboxing in Groovy macros rendered asynchronously. It a…

This vulnerability could allow a malicious user to execute remote code by sending appropriately crafted requests to the default search engine SolrSearch

this is a poc for the CVE-2025-24893

Modified exploit for CVE-2025-24893

EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization.

CVE-2026-34486 Apache Tomcat EncryptInterceptor 绕过漏洞复现（使用GLM5.1复现完成）

Apache Tomcat EncryptInterceptor Bypass → Unauthenticated RCE (CVE-2026-34486)

CVE Reproduction: cve-2026-34486-tomcat_encrypt_bypass_reproduction

EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization.

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu…

Technical analysis and proof-of-concept for CVE-2024-1086, a Linux kernel nf_tables use-after-free vulnerability leading to local privilege escalation. Include…

HTB OneTwoSeven full walkthrough: deterministic creds, chroot symlink escape, rewrite-rule bypass RCE, CVE-2024-1086 to root