Every new exploit,
on the radar.

CVE-2026-36239 | Authenticated RCE in PbootCMS ≤3.2.12

POC exploit for CVE-2026-25895 FUXA Unauthenticated Path Traversal -> Arbitrary File Write -> RCE

A Python replicated exploit for Webmin 1.580 /file/show.cgi Remote Code Execution

This was converted from a metasploit module as an exercise for OSCP studying

An exploit for CVE-2012-2982 implemented in Rust

Python exploit for CVE-2012-2982

PoC Python script as an exercice from tryhackme.

Python PoC for Webmin 1.580 Remote Command Execution (CVE-2012-2982)

Exploit for CVE-2012-2982

XWiki Platform - CVE-2026-33137 PoC - Unauthenticated XAR Import via REST /wikis/{wikiName}

Critical vulnerability in Siemens RuggedCom ROS devices allowing attackers to derive a hidden factory account password from the device MAC address and gain una…

CVE-2026-33712 - Typebot <= 3.15.2 Unauthenticated SSRF via isolated-vm sandbox fetch

Secure expression evaluator - Drop-in replacement for expr-eval without CVE-2025-12735 vulnerability

Security research tool for detecting and testing CVE-2025-12735 (expr-eval RCE vulnerability)

Security research tool for detecting and testing CVE-2025-12735 (expr-eval RCE vulnerability)

CVE-2021-21735 write-up: ZTE ZXHN H168N V3.5 wizard-page information leak, firmware routing flaw, and the path from exposed PPPoE/WLAN data to full admin compr…

The code for personally reproducing the corresponding vulnerability

CVE-2026-38427 — Integer Wraparound → Heap Buffer Overflow in Tasmota fetch_jpg() uint16_t (Tasmota <= 15.3.0.3)

CVE-2026-38426 — strcpy() Stack Buffer Overflow in Tasmota fetch_jpg() boundary[40] (Tasmota <= 15.3.0.3)

CVE-2026-38422 — Remote Code Execution via Combined Buffer Overflows in Tasmota fetch_jpg() (Tasmota <= 15.3.0.3)

CVE-2024-10829 analysis

Second CVE still Remote Code Execution

Code to reproduce the vulnerability individually

Safely detect whether a PAN-OS target is vulnerable to CVE-2026-0265.

Python script to sweep a fleet of Palo Alto firewalls and Panoramas via SSH, check PAN-OS version against CVE-2026-0265 (Authentication Bypass via Cloud Authen…

Exploit for Arbitrary File Read for CVE-2023-26360 - Adobe Coldfusion

Adobe ColdFusion CVE-2023-26360/CVE-2023-29298 自动化实现反弹

Exploit for Remote Code Execution in ColdFusion 2021 (CVE-2023-26360)

This exploit is based on CVE-2023-26360 (https://nvd.nist.gov/vuln/detail/CVE-2023-26360) and was built on top of the Metasploit module and the jakabakos/CVE-2…

Exploit - CVE-2023-26360

A newly discovered vulnerable driver, pstrip64.sys (CVE-2026-29923) allows an unprivileged user to escalate privileges to SYSTEM via a crafted IOCTL request

The pstrip64.sys kernel driver exposes an IOCTL that allows low-privileged users to map arbitrary ranges of physical memory into their own virtual address spac…

CVE-2026-23520 is a critical command injection vulnerability in Arcane, a modern Docker management platform. The flaw exists in the platform's updater service …

🎓 PoC Educativo para CVE-2026-23520. Laboratorio de análisis de vulnerabilidades y mitigación controlada. 🧪

CVE-2025-66177 Metasploit exploit for Hikvision NVR firmware v4.72 and v4.83