Every new exploit,
on the radar.

Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)

NEW EXPLOIT FOR TP LINK

TP-Link Router Authenticated RCE Exploit (CVE-2022-30075) Bu araç, TP-Link Archer AX50 ve bazı diğer TP-Link router modellerinde bulunan **CVE-2022-30075** gü…

CVE-2024-35250 的 Beacon Object File (BOF) 实现。

Cobalt Strike 的 CVE-2024-35250 的 BOF。(请给我加个星，谢谢。)

CVE-2024-35250 demonstrates that HVCI is not a defense against data-only kernel exploits. As long as a driver bug provides an arbitrary R/W primitive, token sw…

PoC for the Untrusted Pointer Dereference in the ks.sys driver

CVE-2024-35250 PoC - Optimized & Condensed Form of Varwara's PoC

CVE-2025-59059: Misattributed RCE in Apache Ranger Static Analysis Correction

Critical Pre-Auth Root RCE (CVSS 10.0) in DigitalOcean Droplet Agent up to v1.3.2 via Command Injection.

Technical analysis and PoC for CVE-2026-24516: Unauthenticated Root Remote Code Execution in DigitalOcean Droplet Agent (CVSS 10.0).

CVE-2026-34444(Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr/setattr)

CVE-2026-33310(Command Injection via shell() Expansion in Parameter Defaults)

CVE-2026-33147(Stack-based Buffer Overflow in gmt_remote_dataset_id)

CVE-2026-33154(RCE @jinja resolver)

Magento APSB25-94 Unauthenticated File Upload to RCE (CVE-2026-XXXX) - Eval Shell + Probe Scanner

CVE-2026-29780 eml-parser

proof of concept for CVE-2025-24999

Balena Etcher versions prior to v2.1.4 on Windows are affected by a Time-of-Check to Time-of-Use (TOCTOU) race condition in the temporary file handling.

This Proof‑of‑Concept demonstrates a **Local Privilege Escalation** vulnerability in GNU inetutils `telnetd`. `telnetd` improperly passes client‑controlled en…

Bloomberg Memray’s Stored XSS via Unescaped Command-Line Metadata

listmonk’s Session Persistence After Password Reset and Password Change

Denial of Service vulnerability in ecdsa (PyPI)

Dahua IP camera CVE research toolkit (CVE-2021-33044/33045, CVE-2025-31700/31701)