Every new exploit,
on the radar.

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions including, 6.0.12. This is due to the plugin not properly verifying a u…

lab setup + exploits for CVE-2026-25526

CVE-2023-30990 exploits

IBM i DDM Unauthenticated RCE - Java Reverse Shell

CVE-2025-62878

Defensive security demo: seL4 microkernel gateway protecting vulnerable ICS from CVE-2019-14462

Authenticated Remote Code Execution vulnerability in Xerox WorkCentre printers via the Network Troubleshooting Log feature.

A Remote Code Execution vulnerability allowing unauthenticated attackers to upload arbitrary PHP files directly to the web server. This results in immediate Re…

Zenar CMS 9.3 suffers from an ​​unrestricted file upload vulnerability​​ in its file management module, allowing authenticated attackers (with minimal privileg…

Cisco iOS SNMP Overflow Exploit Toolkit (CVE-2017-6736)

Cisco iOS SNMP Overflow Exploit Toolkit (CVE-2017-6736)

A POC chain exploit using the recent Cisco SMP exploit (CVE-2017-6736) to chain into Spectre (CVE-2017-5753 and CVE-2017-5715)

Exploit tool for SportsPress Plugin LFI & RCE (CVE-2025-15368) - Proof of Concept

Breaking down CVE-2025-54253 — an Adobe AEM-Forms exploit path from XXE to full remote code execution and its real-world impact.

CVE-2025-54253 | CVE-2025-54254 | Adobe Experience Manager Forms XXE → RCE Framework

Simulated PoC for CVE-2025-54253: Adobe AEM OGNL Injection Vulnerability

Proof of Concept for a statically compiled setuid binary vulnerable to dlopen with LD_LIBRARY_PATH

CVE-2026-24858 FortiCloud Single Sign On (SSO) a factory default enabled feature once you register any FortiGate/FortiManager/FortiAnalyzer contains a critic…

CVE-2026-24858 - Administrative FortiCloud SSO authentication bypass

아직 제로데이인거 같아, 공개되거나 천천히 분석할 예정....

A Proof-of-Concept demonstrating the application of 3D Navier-Stokes CTT formulations to packet flow optimization and defensive bypass.

While Fortinet's January 27, 2026 mitigation for **CVE-2026-24858** focuses on blocking specific accounts like `[email protected]`, it fails to address the **T…

Drupal CVE-2024-45440

Enumeration tool for CVE-2024-45440

Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across la…

WordPress Simple File List Unauthenticated RCE Exploit

Simple File List – Unauthenticated RCE Exploit (CVE-2025-34085)

Exploit for CVE-2025-34085

Research and PoC for CVE-2024-6386

SumatraPDF versions 3.5.0 to 3.5.2 disable TLS hostname verification during update checks # (using INTERNET_FLAG_IGNORE_CERT_CN_INVALID) and do not perform a…