Every new exploit,
on the radar.

CVE-2025-62429 | clipbucket RCE

PoC Script for CVE-2026-34036. For educational purposes only.

nltk.tokenize.StanfordSegmenter dynamically loads external Java .jar files without verification or sandboxing. If an attacker can supply or replace the JAR (e.…

PoC de CVE-2026-0848: validacion de entrada indebida en NLTK que permite ejecucion de codigo via StanfordSegmenter.

Scanner de CVE-2026-0848: detecta instalaciones de NLTK 3.9.2 o inferiores vulnerables. Reportes JSON/HTML/CSV.

SSRF in useplunk/plunk

CVE-2026-32321 | Clipbucket Blind SQL Injection

CVE-2026-30-03 9.8 (Crítico) Possível RCE Jenzabar ICS + MoxieManager

CVE-2026-20698: XNU kernel heap overflow via PF_ROUTE RTA_GENMASK. PoC and analysis. Independently discovered.

API SAS Use It Flow RCE

CVE-2026-1689 Unauthenticated RCE for the Tenda HG10

Apache HugeGraph Server RCE Scanner ( CVE-2024-27348 )

Apache HugeGraph Server Unauthenticated RCE - CVE-2024-27348 Proof of concept Exploit

CVE-2024-27348 Exploitation Toolkit: Complete RCE exploit for Apache Huge-Graph-Server vulnerability.

This is a repository for Apache HugeGraph Remote Code Execution vulnerability(CVE-2024-27348))

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4…

SPIP Vulnerability Scanner - CVE-2023-27372 Detector

This is a PoC for CVE-2023-27372 which spawns a fully interactive shell.

Perform With Mass Remote Code Execution In SPIP Version (4.2.1)

CVE-2023-27372-SPIP-CMS-Bypass

SPIP CVE-2023-27372 Unauthenticated RCE Exploit (Web Shell Upload)

Unauthenticated remote code execution vulnerability in SPIP before 4.2.1.

spip

Stored cross-site scripting (XSS) vulnerabilities in IngEstate Server v11.14.0

Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote…

A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCo…

OpenClaw CVE scanner. Tracks known vulnerabilities (CVE-2026-32013, CVE-2026-32015, etc.). Zero network calls, 100% local. Version checking, upgrade recommenda…

PoC for CVE-2023-43208 RCE exploitation.

CVE-2023-43208: Mirth Connect Pre-Auth RCE PoC

A proof-of-concept exploit for CVE-2023-43208, a remote code execution vulnerability in Mirth Connect before version 4.4.1.

Use java.net.InetAddress for detection

Python implementation of CVE-2023-43208 Mirth Connect RCE (Unauth XStream)

PoC for Mirth Connect Remote Code Execution (RCE)

Proof‑of‑concept Python script demonstrating CVE‑2023‑43208 in Mirth Connect, allowing version checks and command execution on vulnerable instances.

针对JWT渗透开发的漏洞验证/密钥爆破工具，针对CVE-2015-9235/空白密钥/未验证签名攻击/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042的结果生成用于FUZZ，也可使用字典/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)

This repository contains the POC of an exploit for node-jose < 0.11.0

Exploitation of a vulnerability in Cisco's node-jose, a JavaScript library created to manage JWT.

Exploit for Node-jose < 0.11.0 written in Ruby

python2.7 script for JWT generation

POC for CVE-2018-0114 written in Go

Professional JWT security testing toolkit. Analyze, crack, forge, and exploit JSON Web Tokens with 15+ vulnerability checks, 100k secret wordlist, and CVE-spec…

CVE-2026-21643

Python PoC and Nuclei template for CVE-2026-21643 (Pre-Authentication SQL Injection in FortiClient EMS 7.4.4)

Educational security research: OpenWebUI RCE via tool code injection (CVE-2026-0766 - ZDI-26-032)