Every new exploit,
on the radar.

Wordpress plugin Site-Editor v1.1.1 LFI exploit

Exploit for CVE-2018-7422: Local File Inclusion in WordPress Plugin Site Editor 1.1.1 [T1574.008]

CVE-2018-7422

Palo Alto Networks PAN-OS 身份验证绕过漏洞批量检测脚本(CVE-2025-0108)

PoC exploit for CVE-2025-0108 - PAN-OS Authentication Bypass

Detects an authentication bypass vulnerability in Palo Alto PAN-OS (CVE-2025-0108).

NSE script that checks for CVE-2025-0108 vulnerability in Palo Alto Networks PAN-OS

PAN-OS CVE POC SCRIPT

Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit!

CVE-2025-21756: Attack of the Vsock

Reproduce CVE-2022-32250 and CVE-2025-21756 by tampering with modprobe_path and hijacking control flow, respectively.

CVE-2025-48734 - Affects Apache Commons BeanUtils in versions prior to 1.11.0 (and the 2.x branch before 2.0.0-M2).

Proof of Concept (PoC) for Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Related Posts Lite (slug: `related-posts-lite`). CVE-2025-11…

Wordpress-Related-Posts-Lite-plugin-XSS-PoC

CVE-2026-22730 Scanner & Exploit – Spring AI MariaDB Vector Store SQL Injection ,A professional security assessment tool for CVE-2026-22730 – a critical SQL in…

Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload

CVE-2025-38001: Linux HFSC Eltree Use-After-Free - Debian 12 PoC

Repository ini berisi Proof of Concept (PoC) untuk celah keamanan CVE-2025-38001 yang menyerang modul HFSC pada Kernel Linux. Dibuat khusus untuk bahan belajar…

An exploit for vulnerable versions of fontforge and setuptools plus a practical example.

Remote code execution vulnerability in OpenEMR <8.0.0.2.

Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion in Python3

Python3 port of the original Joomla Core (1.5.0 through 3.9.4) - Directory Traversal && Authenticated Arbitrary File Deletion

This repository contains a proof of concept (POC) for CVE-2026-32255, a high-severity Server-Side Request Forgery (SSRF) vulnerability in Kan, an open-source p…

Advisory for CVE-2025-69720: stack-based buffer overflow in GNU ncurses infocmp (CWE-121)

**CVE-2026-2636** is a vulnerability in the Windows Common Log File System (CLFS) driver (`CLFS.sys`). An unprivileged user can trigger an unrecoverable system…

POC for CVE-2026-32731

PoC exploit for CVE-2026-2991 — authentication bypass in KiviCare WordPress plugin (≤4.1.2) allowing unauthenticated patient account takeover and admin session…

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

Search for BTC coins on earlier versions of Bitcoin Core with critical vulnerability OpenSSL 0.9.8 CVE-2008-0166

Private keys vulnerable to Debian OpenSSL bug (CVE-2008-0166)

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

Example script demonstrating a weak PRNG, CVE-2008-0166

A professional Python tool designed for educational penetration testing, demonstrating SSH vulnerabilities (CVE-2008-0166 / CVE-2008-1657) with interactive she…

SSH Exploit Tool (Educational Use Only) 📌 Description This tool demonstrates exploitation of: CVE-2008-0166 CVE-2008-1657 It connects to vulnerable SSH servi…

Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path