Every new exploit,
on the radar.

PoC for CVE-2025-25198: automated Host header poisoning test for Mailcow - HTTPS listener, automatic cookie/CSRF handling, captures first reset link.

Captures password reset tokens from Mailcow Host header injection attacks.

WordPress Privilege Escalation Checker

CVE-2025-55177 + CVE-2025-43300: reverse-engineering the WhatsApp-ImageIO zero-click iOS chain, with interactive labs.

GitLab CVE-2023-2825 PoC. This PoC leverages a path traversal vulnerability to retrieve the /etc/passwd file from a system running GitLab 16.0.0.

PoC for CVE-2023-2825: automated GitLab 16.0.0 arbitrary file read via nested public groups, project upload traversal, reusable upload paths, and clean CLI out…

the proof of concept written in Python for an unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when …

On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition (CE) and Enterprise Edition…

CVE-2023-2825 exploit script

Exploiting CVE-2023-2825 on a VM

Technical details and publication about CVE-2026-38698 and CVE-2026-38699

Proof of Concept (PoC) for a stack-based buffer overflow in Steghide 0.5.1. Demonstrates how long file paths trigger a crash (DoS) and leak sensitive data (pas…

CISCO CVE-2020-3452 Scanner & Exploiter

CVE-2020-3452 Cisco ASA Scanner -unauth Path Traversal Check

Just basic scanner abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of the CISCO ASA applicances.

CVE-2020-3452 exploit

[CVE-2020-3452] Cisco Adaptive Security Appliance (ASA) & Cisco Firepower Threat Defense (FTD) Web Service Read-Only Directory Traversal

CVE-2020-3452 - Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) traversal

CVE-2020-3452

Safe Python scanner for CVE-2025-20362 (Cisco ASA/FTD WebVPN Authentication Bypass)

This exploit is based on CVE-2021-33393 and was built upon the original exploit by Mücahit Saratar, extending it to achieve a reverse shell with root privilege…

apache axis1.4远程代码执行漏洞

Apache Axis1.4 远程命令执行漏洞利用工具 - CVE-2019-0227，支持随机化服务名和Webshell文件名

CVE-2024-0519 root cause analysis

User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File Upload

CVE-2026-45091

CVE-2026-6857

Toshiba Qiomem.sys vulnerable driver POC (CVE-2026-56129)

.NET 7 fork of seal-security-nuget-demo: same CVE-2024-21907 exploit story, retargeted for customers locked to .NET SDK 7.

Automated exploitation scanner for Oracle Reports Server (rwservlet) — CVE-2012-3152 / CVE-2012-3153. Detects, fingerprints, reads files via LFI, tests SSRF vi…

CVE-2026-35330: strongSwan EAP-SIM/AKA heap overflow PoC

CVE-2026-35333: strongSwan RADIUS attribute iterator infinite loop PoC

PoC de CVE-2026-20224: inyeccion XXE para lectura de archivos en Cisco Catalyst SD-WAN Manager (no autenticado).