Every new exploit,
on the radar.

信呼 v2.3.2 针对CVE-2023-1773的研究环境

CVE-2023-1773 Exploit

Unauthenticated Privilege Escalation to Administrator via Role Form Field

A critical vulnerability in the Intelbras NVD 9032 R Ftd IP CFTV device allows an attacker to bypass the multi-factor authentication during password recovery. …

A drop-in fix for CVE-2023-29689 - SSTI in PyroCMS, via a custom Twig Sandbox implementation

Unauthenticated SQL Injection (Time-Based Blind)

Broken Object Level Authorization (BOLA) in CERN's Indico leads to authenticated user enumeration.

Pickle Serialization Remote Code Execution - Memcached Poisoning

CVE-2025-14598 Remote Unauthenticated SQL Injection leading to Remote Code Execution.

CVE-2025-54100 (CVSS 7.8 High) is a command injection vulnerability in the Invoke-WebRequest cmdlet of Windows PowerShell 5.1. It arises from improper neutrali…

CVE-2025-54100（PowerShell 远程代码执行漏洞）

Ruby on Rails Web Console (v2) Whitelist Bypass Code Execution implementation in Python

Modification of Metasploit module for RCE in Ruby-On-Rails Console CVE-2015-3224

CVE-2015-3224 Exploit - Rails Web Console RCE

CVE-2015-3224

Ruby on Rails Web Console Exploit (CVE-2015-3224)

Sourcecodester Covid-19 Contact Tracing System 1.0 is vulnerable to RCE

Daftar CVE 2025-2026 terupdate

This repository contains the Proof-of-Concept (PoC) exploit scripts for two vulnerabilities, CVE-2025-41067 and CVE-2025-41068. These vulnerabilities affect th…

Apache Spark Shell Command Injection Vulnerability

cve-2022-33891-poc

「💥」CVE-2022-33891 - Apache Spark Command Injection

CVE-2022-33891 Exploit For Apache Spark

Apache Spark RCE - CVE-2022-33891

PoC for CVE-2022-33891

For CVE-2022-33891 Apache Spark: Emulation and Detection by West Shepherd

Detail about CVE-2025-67325

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administr…

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted reso…

Mitigation validation utility for the Ivanti Connect Around attack chain. Runs multiple checks. CVE-2023-46805, CVE-2024-21887.

POC Checker for ivanti CVE-2024-21887 Command injcetion

The script in this repository only checks whether the vulnerabilities specified in the Ivanti Connect Secure product exist.

A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282, CVE-2023-46805, an…

Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.

CVE-2024-21887 Exploitation with Ngrok Reverse Shell

Remote Code Execution on Junos OS CVE-2023-36846

Remote Unauthenticated API Access Vulnerability in MobileIron Core 11.2 and older

Hustle Plugin <= 7.8.3 contains hardcoded HubSpot API credentials in inc/providers/hubspot/hustle-hubspot-api.php

poc for CVE-2025-24252 & CVE-2025-24132

iOS Airborne vulnerabilities log artifact extractor from LogArchive CVE-2025-24252

Authenticated RCE for Webmin 1.9.0

Advisory for CVE-2025-65731