Every new exploit,
on the radar.

CVE-2025-11171

Desc "Fix Redis CVE ultil 20260508-10h51 GMT+7"

CVE-2026-32707 PX4-Autopilot tattu_can Stack Buffer Overflow (DoS) Exploit Tool

CVE-2024-4040 CrushFTP SSTI LFI & Auth Bypass | Full Server Takeover | Wordlist Support

Scanner for CVE-2024-4040

is a PoC for CVE-2024-4040 tool for exploiting the SSTI vulnerability in CrushFTP

A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to…

Exploit CrushFTP CVE-2024-4040

CVE-2024-4040 PoC

PoC and advisory for CVE-2026-44648

Диагностика и исправление уязвимости CVE-2026-31431 (copy fail)

Automatic script written in python for CVE-2009-3999

HP Power Manager 4.2 (Build 7) exploit

CVE-2026-44590 - Sherlock <= v0.16.0 - RCE via pull_request_target Injection → Supply Chain Compromise

ZXIC/Sanechips BootROM exploit

CVE-2026-5615

quick fix for CVE-2019-10149, works on Debian\Ubuntu\Centos

CVE-2019-10149 : A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/del…

simple python socket connection to test if exim is vulnerable to CVE-2019-10149. The payload simply touch a file in /tmp/eximrce.

PoC for CVE-2019-10149, this vulnerability could be xploited betwen 4-87 to 4.91 version of Exim server.

CVE-2019-10149 privilege escalation

Instructions for installing a vulnerable version of Exim and its expluatation

CVE-2019-10149

Exim Honey Pot for CVE-2019-10149 exploit attempts.

a proof of concept for CVE-2019-5784

Automated bulk IP or domain scanner for CVE 2020 3580. Cisco ASA and FTD XSS hunter.

Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm

Cisco ASA XSS CVE-2020-3580

CVE-2026-40776 — Broken Access Control + IDOR in WordPress Eventin (wp-event-solution) <= 4.1.8

This repository contains a Python replication script for CVE-2025-4632, an Unauthenticated Remote Code Execution (RCE) vulnerability in Samsung MagicINFO 9 Ser…

OpenLearnX Unauthenticated RCE

A proof of concept exploit for SQLPad RCE (CVE-2022-0944).

SQLPad - Template injection (POC exploit for SQLPad RCE [CVE-2022-0944])

PoC for RCE in SQLPad (CVE-2022-0944)

CVE-2022-0944 Remote Code Execution Exploit

PoC code written for CVE-2022-0944 to make exploitation easier. Based on information found here: https://huntr.com/bounties/46630727-d923-4444-a421-537ecd63e7…

Time Based SQL Injection in Zabbix Server Audit Log --> RCE

This is my exploit for CVE-2024-22120, which involves an SSRF vulnerability inside an XXE with a Gopher payload.

This exploit was created to exploit an XXE (XML External Entity). Through it, I read the backend code of the web service and found an endpoint where I could us…

Proof-of-concept exploit for CVE-2024-22120 that leverages time-based SQL injection and gopher-based SSRF to achieve remote code execution on vulnerable Zabbix…