Every new exploit,
on the radar.

Python Exploit for TP-Link TL-WR940N/TL-WR841N Command Injection Vulnerability

CVE-2023-33538 - TP-Link Command Injection Ruby module for Metasploit Framework

rediscovered tplink nday xp (CVE-2023-33538)

Implements the mitigation for CVE-2025-54505 as described by AMD-SB-7053

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation via account takeover in all v…

RegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_order

SneeitScanner - PoC & Scanner para RCE não autenticada no Sneeit Framework (CVE-2025-6389)

CVE-2025-6389

Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback

WordPress g-FFL Checkout Plugin <= 2.1.0 is vulnerable to a high priority Arbitrary File Upload

Proof of concept for the recent CVE-2026-25232 which is a priv esc vulnerability present in Gogs.

Creosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559.

CVE-2007-4559 - Polemarch exploit

Bypass for CVE-2007-4559 Trellix patch

YISF 2024 CTF-Web (Directory Traversal via ".tar" file, CVE-2007-4559), easy

Example of CVE-2023-24329

WordPress Simple Business Directory Pro Plugin < 15.6.9 is vulnerable to a high priority Privilege Escalation

User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password Reset

WordPress Simple Link Directory Plugin < 14.8.1 is vulnerable to a high priority Broken Authentication

PoC for CVE-2025-13342

Frontend Admin by DynamiApps <= 3.28.20 - Unauthenticated Arbitrary Options Update

Demo Importer Plus <= 2.0.8 - Missing Authorization to Authenticated (Subscriber+) Site Reset and Privilege Escalation

YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Options Update via 'yaymail_import_state' AJAX Action

Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator

Unauthenticated Privilege | Unauthenticated Arbitrary File Upload

CVE-2026-31413: BPF verifier soundness bug - container escape

SQL injection via unsanitized QuerySet.order_by() input

A basic analysis about CVE-2021-35942. SQL injection in Django.

Reproduce CVE-2021-35042

Django SQL injection vulnerability

Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

CVE-2025-4322 – Unauthenticated Privilege Escalation via Password Update "Account Takeover" 🔥

Escaner de identificacion de vulnerabilidades para CVE-2025-4322

Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload

WordPress mass scanner for detecting CVE-2026-1405 exposure.

Minimal repro for Next.js 16.2.4 bundling picomatch 4.0.3 (CVE-2026-33671)

Datalogics Ecommerce Delivery – Datalogics < 2.6.60 - Unauthenticated Privilege Escalation

Async mass-checker for authorized internal testing of CVE-2026-2631 exposure.

Published Details for this CVE