Every new exploit,
on the radar.

Device-bound CVE-2026-64560 adaptation for Xiaomi 15 dada OS4.0.0.8

OnePlus Ace 6 temporary root tool (CVE-2026-64560) - device-verified port with corrected bootidParent address

Exploit of CVE-2026-64560 for kernelCTF, LTS-6.12.95

CVE-2026-64560 toolkit: Go single-binary toolchain + realme RMX5010 (A16, SM8750) target port

针对 OnePlus Ace6 设备的 cve-2026-64560 复现

Am I fixed? Was I hacked? Read-only checker for Citrix NetScaler CTX697096 (CVE-2026-88771–88778), CTX697174 (CVE-2026-88779) and CTX697191 (CVE-2026-107406, S…

Tooling related to CVE-2026-88771 and CVE-2026-88772

Defensive security checker for Citrix NetScaler ADC & Gateway — CVE-2026-88771 through CVE-2026-88778

Improper Input Validation (CWE-20) SSVC Scores Exploitation: Active Technical Impact: Total

A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.

A detection/hunting script for compromise related to CVE-2026-88771

Netlogon and CLDAP vulnerability research with a proof of concept.

CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing.

Technical analysis and Proof-of-Concept (PoC) for CVE-2026-41089, a critical unauthenticated Remote Code Execution (RCE) vulnerability in the Windows Netlogon …

CVE-2026-41089 checker: unauthenticated, non-destructive detection for the Netlogon CLDAP stack buffer overflow (CVSS 9.8). Reports whether a domain controller…

CVE-2026-41089 是 Windows Netlogon 服务中一个关键的远程代码执行漏洞，单包即可崩溃 lsass.exe，导致域控制器在约 30-60 秒内重启。此期间该 DC 的所有域认证将失败。

CVE-2026-41089

🛡️ Official AI Security Tool diagnostic module for CVE-2026-41089 (Windows Netlogon Stack Buffer Overflow RCE). Features technical writeup, attack architecture…

Scan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.

Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.

BitLocker TPM+PIN Hardening Against CVE-2026-45585 (YellowKey)

YellowKey BitLocker recovery audits CVE-2026-45585: yellowkey github, TPM, recovery key backup. Windows 10/11 CLI GUI, portable audit tool for volumes you own.…

Intune Remediation package for the CVE-2026-45585 YellowKey BitLocker/WinRE bypass mitigation described in the provided procedure. This package removes `autof…

CVE-2026-45585

A small script to apply Yellowkey mitigation based on CVE-2026-45585 instructions

YellowKey | BitLocker Bypass Vulnerability (CVE-2026-45585)

YellowKey | BitLocker Bypass CVE-2026-45585 | Detect & Fix Automatically via Microsoft Intune

CVE-2026-10520

CVE-2026-10520 and CVE-2026-10523

Root-Level RCE via OS Command Injection in Ivanti Sentry

Patch: OGNL injection (Apache Struts)

Exploit for CVE-2026-10520 | Ivanti Sentry - OS Command Injection

CVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE). Because the tool listens on 0.0.0.0 by default, …

MCPJam inspector contains a remote code execution

A proof-of-concept exploit for CVE-2026-23744 - MCPJam Inspector Remote Code Execution (RCE) vulnerability. This tool demonstrates the security flaw in version…

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept (POC

MCPJam Inspector is a local-first development platform for MCP servers. In versions 1.4.2 (and earlier), a RCE flaw lets attackers send crafted HTTP request th…

CVE-2026-23744 is an unauthenticated command injection in MCPJam Inspector ≤1.4.2 via /api/mcp/connect. This POC exploits it by sending a crafted JSON payload …

Exploit to MCPJam Inspector <=1.4.2

PoC for CVE-2026-23744, demonstrating an unauthenticated RCE in MCPJam Inspector (<= 1.4.2).

Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code

Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori / Xint.

A Go implementation of copyfail (CVE-2026-31431)

PoC: fully unprivileged container escape to node-level code execution on Kubernetes via CVE-2026-31431 page-cache corruption + shared image layers. Validated o…

CVE-2026-31431 纯文件利用

Most Linux LPEs need a race window or a kernel-specific offset. Copy Fail is a straight-line logic flaw, it needs neither. The same 732-byte Python script (or …

CVE-2026-31431-killed page-cache exploit — code exec into containers sharing the same image layer

Minimal no-libc Linux x86_64 ELF PoC build for Copy Fail (CVE-2026-31431)

MongoDB CVE-2025-14847 Heap Memory Leak Scanner | OP_COMPRESSED zlib Vulnerability | Bug Bounty & Red Team Tool

a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensitive data from vulnera…

poc for CVE-2025-14847

MongoDB 内存泄露漏洞 (CVE-2025-14847) 检测工具

Exploit lab, docker and code scanner for mongobleed Vulnerability CVE-2025-14847 plus Phoenix Security Sync tools

Academic proof-of-concept demonstrating CVE-2025-14847 for authorized security research.

CVE-2025-14847 (MongoBleed)

Explot, Lab, Scanner - external and docker container, for SMongobleed-CVE-2025-14847 plus phoenix security uploader

This repository contains an exploit demonstration for CVE-2024-0670, a local privilege escalation vulnerability affecting the CheckMK Agent for Windows. The vu…

PoC for CVE-2024-0670

CheckMK Agent Local Privilege Escalation (PoC)

🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.

🚀 Utilize this C++ tool for local privilege escalation on CheckMK agents, addressing the CVE-2024-0670 vulnerability effectively.

High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)

Explanation and full RCE PoC for CVE-2025-55182

Original Proof-of-Concepts for React2Shell CVE-2025-55182

CVE-2025-55182 POC

Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.

RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478

React Shell & Next.js RSC Exploit Tool (CVE-2025-55182)

The OpenSSH client and server are vulnerable to a pre-authentication DoS attack between versions 9.5p1 to 9.9p1 (inclusive) that causes memory and CPU consump…

CVE-2025-26466 - SSH Ping DoS Ruby module for Metasploit Framework

poc for CVE-2025-26466

CVE-2025-26466 OpenSSH SSH2_MSG_PING DoS PoC

CVE-2026-59310-POC 仅用于自测，请勿用于攻击

CVE-2026-59310 PoC

VC-Strike — VMware vCenter CVE-2026-59310 (unauth root RCE) & CVE-2026-59309 (SRP auth bypass) authorized pentest suite. GUI+CLI, multi-session C2, stdlib-only…

CVE-2026-59310

ChinaRan0/CVE-2026-59310-POC 的优化版本。子命令、一次性 cron、带远端 PTY 的交互 shell。仅限授权测试。

CVE-2004-2687 DistCC Daemon Command Execution

CVE-2004-2687 (Distcc 3.2.1) exploitation, methodology & remediation — Metasploitable2 lab

Ushbu videoda Metasploitable 2 tizimidagi distccd servisidagi zaiflikdan foydalanib, Kali Linux orqali remote shell olish ko‘rsatib beriladi.

Metasploit-based penetration test on an isolated Metasploitable2 lab VM — remote exploitation via DistCC (CVE-2004-2687), privilege escalation via udev netlink…

Writeup + CVE analysis + countermeasures for the Hacktivity 'Vulnerabilities, Exploits, and Remote Access Payloads' lab (netcat shells, Metasploit, CVE-2010-12…

XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template

CVE-2026-64638: WordPress Pre-auth XSS → RCE (XSS2Shell) PoC

Wordpress Pre-auth XSS to RCE exploit PoC (xss2shell & CVE-2026-64638)

Template Nuclei para detecção não-intrusiva do XSS2Shell, um parser differential pré-autenticado no WordPress Core que permite injeção de elementos DOM na pági…

🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit

CVE-2026-64638

XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE PoC mirror — WordSec, MIT; for authorized security testing

Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.3.0–19.3.1

GitLab Unauthenticated Arbitrary File Read

GitLab CE/EE unauthenticated path traversal (CVE-2026-85706) - PoC

CVE-2026-85706 Unauthenticated File Read

cve-2026-85706-poc-exploit-gitlab

CVE-2026-85706_docker_exp

CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection Toolkit. Detect and hunt for exploitation of the critical unauthenticated GitLab CE/EE path trav…

CVE-2026-85706 · GitLab CE/EE unauthenticated file read · research PoC with oracle mode, fd enumeration, and tiered loot targeting

CVE-2026-82329 JFrog Artifactory unauthenticated auth-bypass: reproducible Docker lab + URL-parameter validator PoC + patch-diff analysis

CVE-2026-82329 — JFrog Artifactory (self-hosted) Auth Bypass

CVE-2026-82329 – JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) | Red/Blue Team suite for self-hosted Artifactory 7.x (111-161). 2 tools: Full Exploit (JWTfo…

CVE-2026-82329 — JFrog Artifactory Auth Bypass

CVE-2026-82329 — JFrog Artifactory unauthenticated authentication bypass ("phantom join key" -> forged service admin token)

CVE-2026-82329 - Draft or TODO

CVE‑2026‑82329 is a critical authentication bypass in JFrog Artifactory (CVSS 9.8) allowing unauthenticated attackers to obtain full administrative privileges.…

CVE-2026-82329 Poc

exploit for CVE-2026-42945

Nginx Rewrite CVE Scan(CVE-2026-42945 nginx-rift CVE-2026-9256)

nginx CVE scanner + RCE exploit framework (CVE-2026-42945 + 16 others)

NGINX Rift 漏洞分析与复现

Script Python para detecção de instâncias Nginx vulneráveis ao CVE-2026-42945 em IPs, CIDRs e ASNs.

CVE-2026-42945 NGINX 堆溢出漏洞扫描与验证工具

Behavioral detection script for CVE-2026-42945 (NGINX Rift) — heap overflow in ngx_http_rewrite_module. No RCE, crash-based detection only.

FreePBX versions 15, 16, and 17 contain a Remote Code Execution (RCE) vulnerability caused by insufficient sanitization of user-supplied data in endpoints.

FreePBX SQL Injection Exploit

CVE-2025-57819 -> rce

Detects vulnerable FreePBX versions affected by CVE-2025-57819.

This repository includes two PoC scripts for CVE-2025-57819 in FreePBX: one to create a new admin user (poc_admin.py), and another to extract credentials using…

FreePBX Pre-Auth SQLi to RCE (CVE-2025-57819) — All-in-One Exploit

CVE-2026-46242

CVE-2026-46242

Verificador de Vulnerabilidad: Bad Epoll (CVE-2026-46242)

aarch64 race condition checker

CVE-2025-21479 proof-of-concept, I think

A proof-of-concept for CVE-2025-21479, chained with a Dirty Pagetable technique.

CVE-2025-21479 PoC for ZFlip5 with Knox in the way!(˶˃ ᵕ ˂˶)

This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapd…

Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell

Support OriginOS 4~ OriginOS 6(Some firmware requires manual, individual adaptation), using CVE-2025-21479，CVE-2026-43499

Temporary root (uid 0) on a bootloader-locked ASUS Zenfone 9 via CVE-2025-21479 + a perf-based physical-address leak. GPLv3.

This PoC demonstrates a race condition in the Windows kernel leading to a double-free vulnerability, allowing local privilege escalation to SYSTEM. The exploit…

Hands‑on analysis of CVE‑2025‑62215, a Windows Kernel race condition exploited in the wild. Demonstrates privilege escalation to SYSTEM, detection scripts, and…

CVE-2025-62215: Windows Kernel Race Condition + Double-Free EoP

CVE-2025-62215 is an Elevation of Privilege (EoP) vulnerability in the Windows Kernel, disclosed in November 2025 and confirmed to be actively exploited as a z…

CVE-2025-62215 exploit development using Claude Code Agent Team

Windows Kernel - Elevation of Privilege

Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self-cleaning, token-guard…

CVE-2026-48908 — PoC exploit for unauthenticated RCE in SP Page Builder (Joomla) via arbitrary file upload. Multi‑threaded, case‑bypass, shell verification. Fo…

CVE-2026-48908

Technical analysis and advisory for CVE-2026-48908: Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder.

Passive security checker for CVE-2026-48908 affecting SP Page Builder.

CVE-2026-48908 - SP Page Builder Joomla Unauthenticated RCE

Unauthenticated RCE PoC for CVE-2026-48908 SP Page Builder (Joomla) arbitrary file upload and remote code execution exploit with mass scaning support.

CVE-2007-2447 - Samba usermap script

Exploit Samba smbd 3.0.20-Debian

PHP-CGI-REMOTE_CVE-2012-1823, UnrealIRCd, MySQL, PostgreSQL and SSH bruteforce, VSFTPD2.3.4, samba CVE-2007-2447, JAVA RMI Server, distcc daemon, misconfigured…

Python implementation of 'Username' map script' RCE Exploit for Samba 3.0.20 < 3.0.25rc3 (CVE-2007-2447).

CVE-2007-2447 - Samba usermap script

Exploit code for CVE-2007-2447 written in Python3.

Remote Command Injection Vulnerability (CVE-2007-2447), allows remote attackers to execute arbitrary commands by specifying a Samba username containing shell m…

**CVE-2026-18963** — unauthenticated Keycloak account takeover via the reset-credentials flow.

Exploit for KeyCloak CVE-2026-18963

CVE-2026-18963

Keycloak reset-credentials flow bypass

Hunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak database

This repo is poc of cve-2026-18963. Please use it on legal products (lab, local,...).

CVE-2026-18963 Keycloak Reset-Credentials State Bypass Detector

CraftCMS has an RCE vulnerability via relational conditionals in the control panel

Craft CMS RCE via relational conditionals in the control panel

CVE-2026-31857 - Craft CMS authenticated RCE timing verifier.

Proof of Concept for CVE-2026-31857, an authenticated Remote Code Execution vulnerability in Craft CMS caused by unsafe processing of user-controlled Twig expr…