Every new exploit,
on the radar.

CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File

Windows File Explorer Spoofing Vulnerability (CVE-2025-24071)

Metasploit module for CVE-2025-24071 - Windows NTLM Hash Leak via .library-ms

A PoC of CVE-2025-24071 / CVE-2025-24054, A windows vulnerability that allow get NTMLv2 hashes

Exploited CVE-2025-24071 via SMB by hosting a .library-ms file inside a .tar archive. Using tar x from smbclient, the payload is extracted server-side without …

CVE-2025-24071 Proof Of Concept

Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability

Alternativa CVE-2025-24071_PoC

Zabbix CVE-2024-42327 PoC

cve-2024-42327 ZBX-25623

PoC for CVE-2024-42327 / ZBX-25623

Proof of concept for CVE-2024-42327: Zabbix privilege escalation to RCE

POC for CVE-2024-42327, an authenticated SQL Injection in Zabbix through the user.get API Method

This is for educational porpuses only. Please do not use agains unathorized systems.

Caderno Temático NotebookLM: análise de vulnerabilidades SQL Injection (CVE-2024-42327, CVE-2026-23921) no Zabbix, com engenharia de prompts, cadeia de ataque …

CVE-2023-40028 affects Ghost, an open source content management system, where versions prior to 5.59.1 allow authenticated users to upload files that are symli…

Arbitrary file read in Ghost-CMS allows an attacker to upload a malicious ZIP file with a symlink.

CVE-2023-40028 PoC Exploit

Proof of concept for CVE-2023-40028: Ghost arbitrary file read

Exploit for CVE-2023-40028 (for educational purposes)

POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692

Unauthenticated RCE Flaw in Rejetto HTTP File Server (CVE-2024-23692)

CVE-2024-23692 Exploit

CVE-2024-23692

Rejetto HTTP File Server (HFS) 2.x - Unauthenticated RCE exploit module (CVE-2024-23692)

HFS2.3未经身份验证的远程代码执行(CVE-2024-23692)

CVE-2021-40444 PoC

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit

Modified code so that we don´t need to rely on CAB archives

CVE-2021-40444

Microsoft MSHTML Remote Code Execution Vulnerability CVE-2021-40444

A Proof-of-Concept for CVE-2025-64512 using a polyglot file.

CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads

CLI wrapper around the official PoC for CVE-2025-64512 — pdfminer.six insecure pickle deserialization via crafted PDF (RCE)

PoC script for CVE-2025-64512

CVE-2025-64512 - pdfminer.six Remote Code Execution Exploit

Exploit for CVE-2025-64512 to get a reverse shell.

PoC for CVE-2025-22457 - A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and …

CVE-2025-22457: Python Exploit POC Scanner to Detect Ivanti Connect Secure RCE

Prevent CVE-2025-22457 and other security problems with Juniper/Ivanti Secure Connect SSL VPN

PoC CVE-2025-22457

Altay takımı haftalık sunumu için yaptığım cve-2025-22457 zafiyeti demo uygulaması

CVE-2026-5118 | Divi Form Builder <= 5.1.2 | Unauthenticated Privilege Escalation via Role Injection

CVE-2026-5118-exp_wordpress_Divi Form Builder

CVE-2026-5118 – Python2 mass exploit for Divi WordPress plugin Unauthenticated administrator registration via admin-ajax.php. Multi‑threaded scanner with nonce…

Divi Form Builder <= 5.1.2 — Unauthenticated Privilege Escalation via Role Injection

PoC for NVIDIAScape bug

CVE-2025-23266 – Fully Weaponized NVIDIA Container Toolkit Exploit

cve-2025-23266-migration-bypass

CVE-2025-23266 targets FastAPI’s parse_request() function, where oversized HTTP headers cause a buffer overflow and remote code execution. The article explains…

Original offensive security research into Linux container boundary weaknesses. Whitepaper 1: OCI hook isolation failures in the NVIDIA Container Toolkit (CVE-2…

WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerabil…

Hijacking Bluetooth Accessories Using Google Fast Pair: WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkit

The official reference implementation & vulnerability verification of our attack WhisperPair (CVE-2025-36911) which affects Google's Fast Pair protocol.

Three-stage Bluetooth BDADDR extraction, DoS & hijack on Fast Pair devices; unpatched primitives outside CVE-2025-36911 scope (no Ubertooth needed)

Exploit of the CVE-2025-36911 vulnerability in Python for testing our own equipment

WhisperPair (CVE-2025-36911) POC for ESP32 device

A security research tool that identifies and demonstrates the CVE-2025-36911: Fast Pair Pairing Mode Bypass vulnerability

This script can be used to check if a Bluetooth device is vulnerable to CVE-2025-36911.

CVE-2026-33634 (CVSS 9.4) — The most impactful CI/CD supply chain attack of 2026 so far.

Scanner de IOCs del ataque de cadena de suministro TeamPCP (CVE-2026-33634).

Companion source for YouTube video "Stop Mounting docker.sock — Run Trivy Without Giving Away Root Access — (inspired by CVE-2026-33634)"

Formally verified, quantitative reconstruction of the Trivy/TeamPCP GitHub Actions supply-chain attack (CVE-2026-33634): a TLA+/TLC incident model, PRISM proba…

A vulnerability within Microsoft Office's wwlib allows attackers to achieve remote code execution with the privileges of the victim that opens a malicious RTF …

RTF Crash POC Python 3.11 Windows 10

POC : CVE-2023-21716 Microsoft Word RTF Font Table Heap Corruption

test of exploit for CVE-2023-21716

Proof Of Concept for CVE-2023-21716 Microsoft Word Heap Corruption

This is an exploit file which is used to check CVE-2021-21716 vulnerability

Results of retrohunt for files matching YARA rules from https://github.com/AmgdGocha/Detection-Rules/blob/main/CVE-2023-21716.yar

This is a one-time signature verification bypass. For persistent signature verification bypass, check https://github.com/TomKing062/CVE-2022-38691_38692

Bootloader unlock using CVE-2022-38694 for Anbernic Unisoc T820 devices

CVE-2022-38694 Hardened Exploit - RP2350 USB Host Auto Flasher for Unisoc devices

Unlock Bootloader for Itel S23 (S665L) / Unisoc T606 using CVE-2022-38694

rooting an ATOZEE P12 on Android 14 using CVE-2022-38694 — because fastboot oem unlock said no, so we found another way.

This is a collection of Unisoc BootROMs dumped from various Unisoc chipsets via CVE-2022-38694

Bootloader unlock (CVE-2022-38694) & root guide for Realme C53 / RMX3760 (Unisoc T612)

Extract a concerning amount of user information from Unisoc ZTE devices using CVE-2022-38694.

Proof-of-Concept for Server Side Request Forgery (SSRF) in request-baskets (<= v.1.2.1)

A tool to perform port scanning using vulnerable Request-Baskets

To assist in enumerating the webserver behind the webserver SSRF CVE-2023-27163

Requests Baskets (CVE-2023-27163) and Mailtrail v0.53

CVE-2023-27163 - Request Baskets SSRF

Golang PoC for CVE-2023-27163 Mailtrail Exploit

Proof of Concept for Server Side Request Forgery (SSRF) in request-baskets (V<= v.1.2.1)

CVE-2023-27163 Request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerab…

CVE-2023-21554 Windows MessageQueuing PoC，分析见 https://www.zoemurmure.top/posts/cve_2023_21554/

Documentation and PoC for CVE-2023-21554 MSMQ Vulnerability

CVE-2023-21554 PoC

CVE-2026-23111 nf_tables catchall UAF — unprivileged LPE for Linux 5.10-6.18. Auto-adaptive exploit with KASLR bypass, arbitrary kernel read, and ROP chain. Su…

Linux Kernel nf_tables Use-After-Free (CVE-2026-23111) — LPE PoC

CVE-2026-23111

Exposure checker and safe disposable-VM lab for CVE-2026-23111 (Linux nf_tables use-after-free local privilege escalation). Defensive: detection, mitigation, m…

scuffed PoC for CVE-2026-23111. Made and ran on Linux Kernel 6.12.69

High Severity LPE vulnerability in Linux Kernel, with a CVS score of 7.8. An inverted check from user enables a process inside the container to break out of th…

CVE-2026-23111 - Linux - Draft

Script to check if system are vulnable to cve-2026-23111

CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2

The vulnerability allows an attacker with network access to an Erlang/OTP SSH server to execute arbitrary code without prior authentication.

CVE-2025-32433 PoC: Unauthenticated Remote Code Execution (RCE) in Erlang/OTP SSH. A proof-of-concept exploit for CVE-2025-32433

python script to find vulnerable targets of CVE-2025-32433

Security research on Erlang/OTP SSH CVE-2025-32433.

Missing Authentication for Critical Function (CWE-306)-Exploit

Exploit and detect tools for CVE-2020-0688

cve-2020-0688

cve-2020-0688

CVE-2020-0688_EXP Auto trigger payload & encrypt method

CVE-2020-0688 - Exchange

Quick tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method.

cve-2020-0688 UNIVERSAL Python implementation utilizing ASPX webshell for command output

Remote Code Execution on Microsoft Exchange Server through fixed cryptographic keys

Microsoft Windows - 'srv2.sys' SMB Code Execution (Python) (MS09-050)

cve-2009-3103

CVE-2009-3103 ms09-050

MS09-050 (CVE-2009-3103) SMBv2 srv2.sys buffer overflow exploit with built-in scanner, arch auto-detection, and standalone reverse shell payloads for x86/x64. …

Sudo Baron Samedit Exploit

PoC for CVE-2021-3156 (sudo heap overflow)

CVE-2021-3156 - Sudo Baron Samedit

CVE-2021-3156非交互式执行命令

Root shell PoC for CVE-2021-3156

CVE-2021-3156

clif is a command-line interface (CLI) application fuzzer, pretty much what wfuzz or ffuf are for web. It was inspired by sudo vulnerability CVE-2021-3156 and …

PoC for popping a system shell against the LnvMSRIO.sys driver

Exploit LnvMSRIO.sys vulnerable driver

PoC to exploit lenovo dispatcher driver (LnvMSRIO.sys) (CVE-2025-8061)

MSRMapper is a manual kernel driver mapper for Windows x64 that abuses CVE-2025-8061 in the vulnerable Lenovo driver LnvMSRIO.sys to perform a BYOVD (Bring You…

My PoC of Lenovo-CVE-2025-8061

This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution (RCE) vulnerability affecting CraftCM…

CraftCMS RCE Checker (CVE-2025-32432)

Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail

Exploit, POC for CVE-2025-32432, CraftCMS2Shell

AI修复生成的CVE-2025-32432的poc

Working PoC for CVE-2025-32432 - Craft CMS <= 5.6.16 unauthenticated RCE via Yii2 PhpManager gadget + nginx access.log poisoning

Craft CMS CVE-2025-32432 command runner adapted from Nicolas Bourras and Orange Cyberdefense research

CutePHP Cute News 2.1.2 RCE PoC

CuteNews Avatar 2.1.2 Remote Code Execution Vulnerability

CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept

Exploits CuteNews 2.1.2 via poor file upload checks used when uploading an avatar image leading to RCE.

Exploit Code for CVE-2019-11447 aka CuteNews 2.1.2 Avatar upload RCE (Authenticated)

CPTS HackTheBox - Penetration Test Report: WordPress Path Traversal CVE-2019-11447

WordPress - Authenticated XXE (CVE-2021-29447)

A proof of concept exploit for a wordpress 5.6 media library vulnerability

WordPress XXE vulnerability

Exploit WordPress Media Library XML External Entity Injection (XXE) to exfiltrate files.

Wordpress XXE injection 구축 자동화 및 PoC

Arbitrary file read controller based on CVE-2021-29447

A Golang program to automate the execution of CVE-2021-29447

HTTP/2 Bomb PoC — CVE-2026-49975 (HPACK indexed reference bomb + flow-control stall)

HTTP/2 Bomb

PoC de CVE-2026-49975 (HTTP/2 Bomb): DoS remoto contra servidores web con HTTP/2 por defecto.

CVE-2026-49975漏洞复现

CVE-2026-49975 HTTP/2 Stream Amplification — Docker PoC with Web Console

CVE-2026-49975

Security research PoC for CVE-2026-49975: HTTP/2 HPACK compression bomb + flow-control hold DoS in Apache mod_http2

Disclosed on June 3, 2026, the "HTTP/2 Bomb" is an unauthenticated remote DoS that combines an HPACK compression bomb with a Slowloris-style hold to exhaust se…