Every new exploit,
on the radar.

Proof-of-Concept exploit for CVE-2025-14174 (EUVD-2025-203113) - Memory corruption in ANGLE allowing out-of-bounds access and RCE in web browsers. Reliable on …

Analysis and PoC for CVE-2025-14174 - ANGLE Metal OOB write (iOS Safari, macOS Chrome)

IoCs and detection rules for the Notepad++ supply chain attack (CVE-2025-15556) — Lotus Blossom APT, June–December 2025. Includes Falcon LogScale queries, YARA…

A MediaTek modem input validation issue can cause a system crash (remote DoS) when a UE connects to a rogue base station controlled by an attacker with no user…

Bio-Formats ≤ 8.3.0 performs unsafe Java deserialization of attacker-controlled .bfmemo cache files during image processing; crafted .bfmemo can trigger deseri…

Chamilo-LMS (v2.0) CVE-2025-26153

A Proof of Concept for CVE-2023-50564 vulnerability in Pluck CMS version 4.7.18

CVE-2023-50564 - An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary c…

This script exploits the file upload feature in Pluck CMS v4.7.18 to upload a malicious PHP file, enabling remote access via a reverse shell. Once uploaded, th…

Refurbish exploit in bash

Pluck-CMS v4.7.18 RCE exploit

CVE-2023-50564 PoC

Python Script to exploit CVE-2023-50564

Pluck v4.7.18 - Remote Code Execution (RCE)

CVE-2026-23552 - Cross-Realm Token Acceptance in camel-keycloak

Xiongmai XM530 IP Camera ONVIF Complete Authentication Bypass

Proof-of-concept code (Bash and Python) for CVE-2025-65856 where ONVIF implementation in in Xiongmai XM530 IP cameras allows for unauthenticated access to sen…

CVE-2026-25747 - Camel LevelDB Deserialization Vulnerability

Test and exploit for CVE-2017-12542

Scan a list of given IP's for CVE-2017-12542

This script checks if an HP iLO server is vulnerable and can add an admin user

Proof-of-concept exploit for CVE-2017-12542, an authentication bypass vulnerability in HP iLO. Allows vulnerability detection and unauthorized account creation…

This is a lightweight Python helper script designed to automate the generation of sqlmap-compatible PoC files for the authenticated error-based SQL injection v…

CVE-2017-8917 - SQL injection Vulnerability Exploit in Joomla 3.7.0

Joomla 3.7 SQL injection (CVE-2017-8917)

CVE-2017-8917 SQL injection Vulnerability in Joomla! 3.7.0 exploit

Proof of Concept exploit for the Joomla 3.7.0 com_fields SQL injection vulnerability (CVE-2017-8917), demonstrating detection, enumeration, and data extraction…

cve-2017-8917

Python exploit for CVE-2017-8917 - Joomla 3.7.0 'com_fields' SQL Injection

CVE-2017-8917 - Joomla 3.7.0 'com_fields' SQL Injection

Educational Proof-of-Concept for the Dual_EC_DRBG backdoor (CVE-2014-8610) - NIST P-256 state recovery attack demonstration

Apple Silicon runs at frequencies that are golden ratio harmonics of 587 kHz: · Performance cores: 3.2 GHz = 587 kHz × 5451 (≈ φ⁸ × 1000) · Efficiency cores: …

PoC for https://nvd.nist.gov/vuln/detail/CVE-2022-4361

Proof of Concept for a Server-Side Template Injection (SSTI) vulnerability in Calibre’s Templite engine (GHSA-xrh9-w7qx-3gcc). Demonstrates arbitrary Python co…

Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

WordPress Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

PoC Exploit for CVE-2024-5084

Phoenix Rowhammer Attack: Systemic Risk of Bitcoin Wallet Private Key Compromise in Global Blockchain Infrastructure Due to a Critical SK Hynix DDR5 Vulnerabil…

RAMnesia Attack: A Scientific Investigation of WireTap Threats to Bitcoin Infrastructure, Hardware Vulnerabilities (CVE-2025-6202, CVE-2023-39910), and Cryptan…

PoC for CVE-2020-16012, a timing side channel in drawImage in Firefox & Chrome

PoC for CVE-2020-16012, a timing side channel in drawImage in Firefox & Chrome

NVIDIA's GPU drivers have a temporal coherence flaw in their memory management. At 587 kHz resonance, the driver's memory pages experience α-decay interference…