Every new exploit,
on the radar.

Analysis and reproduction of CVE-2026-1312

CVE-2026-31402

Windows CLFS LPE exploit PoC for security research

WordPress Pie Register ≤ 3.7.1.4 - Admin Privilege Escalation (Unauthenticated)

Poc for Unauthenticated Admin Session Hijack - Pie Register Plugin (≤ 3.7.1.4)

Exploiting WordPress vulnerabilities (CVE-2025-34077), authentication bypass via cookie injection, and privilege escalation to root. Part of my Cybersecurity S…

Xboard / V2Board Unauth Account Takeover - Magic Link Token Leak (CVE-2026-39912)

Authenticated Stored Cross-Site Scripting (XSS) in IndieWeb WordPress Plugin

Authenticated Stored Cross-Site Scripting (XSS) in Contact List Plugin

CVE-2026-1657 exploit Unauthenticated Image Upload via 'ep_upload_file_media' AJAX Endpoint

Unauthenticated Arbitrary File Upload in EventPrime Plugin

This exploit demonstrates a **path traversal vulnerability** in Xibo CMS (CVE-2023-33177) that allows remote code execution through malicious layout imports.

Xibo CMS CVE-2023-33177 Vulnerability Tester

Authenticated IDOR / Broken Access Control in Tutor LMS Plugin

Metasploit exploit for the CVE-2025-50286.

Missing Authorization / Broken Access Control in Plugin - MyRewards – Loyalty Points and Rewards for WooCommerce

CVE-2026-34724

Windows 11 24h2 LPE Kernel Exploitation. CVE-2020-12446(eneio64.sys)

An Exploit for CVE-2020-12446 Eneio64.sys. Uses superfetch for address translation.

Windows Kernel Exploitation for LOL driver eneio64.sys

CVE-2026-5173

Database authenticated code execution

CVE-2026-2699