Every new exploit,
on the radar.

Running OWASP cve-lite-cli against the pi monorepo: scan journey and key finding (vitest CVE-2026-47429).

POC for CVE-2022-39996 (Reflected XSS) and CVE-2022-39997 (Weak Password) in Teldat RS123/RS123w Router

CVE-2026-45067 - Draft

CVE-2024-52011 - Draft

dotCMS Pre-auth SQL Injection

PoC repository for CVE-2025-68147: Stored Cross-Site Scripting (XSS) in OpenSourcePOS. Vulnerability allows privilege escalation via malicious JavaScript injec…

PoC & Write-up for CVE-2025-68434: Critical CSRF in OpenSourcePOS. Exploits a disabled filter configuration to allow unauthenticated attackers to silently crea…

A Python-based tool to check for vulnerabilities in OpenSSH installations on local or remote systems by scanning specific IPs. It checks if the OpenSSH version…

Scanner para identificação de servidores com softwares SSH possivelmente vulnerável às CVEs CVE-2024-6387 e CVE-2023-48795.

Python tool to identify SSH servers potentially vulnerable to CVE-2023-48795 (Terrapin) by analyzing OpenSSH version banners via netcat. Useful for internal au…

CVE-2026-11499

Cybersecurity Researcher | Apple Security Credit (CVE-2025-43537) | Vulnerability Research & Responsible Disclosure

Stored XSS in Computer Laboratory Management System - v1.0

SQL Injection in computer-laboratory-management-system-using-php-and-mysql - LMS - PHP v1.0

CVE-2008-1930 is a critical improper authentication vulnerability affecting the core cookie integrity mechanism in WordPress version 2.5. It allows remote atta…

Plan v3 US-6: coredns-style fork fixture for Scanner E2E (CVE-2023-39325)

Reflected Crosss Site Scripting (XSS)

针对ESAPI 的ESAPI.encoder().encodeForSQL()方法，OracleCodec对象的sql 时间盲注利用

Chatwoot SQL injection in FilterService

CVE-2020-17103 adapted for C2 with split-binary SYSTEM callback

CVE-2020-17103 was apparently not patched or the patch was reversed, regardless this the PoC for an LPE in cldflt.sys

CVE-2020-17103

Sigma detection rule for MiniPlasma (CVE-2020-17103)

MiniPlasma CVE-2020-17103 mitigation advisory

CVE-2020-17103

WooCommerce Payments: Unauthorized Admin Access Exploit

CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]

CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]

Exploração prática de vulnerabilidade crítica no WordPress usando o plugin WooCommerce Payments.

Wordpress CVE-2023-28121

Python research notes and tooling for CVE-2023-28121

WooCommerce Payments (WordPress plugin) =< 5.6.1 CVE-2023-28121 PoC

Perforce security research and tools - CVE-2026-6043

MOC3ingbird Exploit for Live2D (CVE-2023-27566)

The VMWare Horizon Connection Server is often used as an internet-facing gateway to an organization’s virtual desktop environment (VDI). Until recently, most o…

In-depth analysis of cve-2026-26555