Every new exploit,
on the radar.

CasaOS expose multiple unauthenticated API endpoints that allow remote disclosure of sensitive configuration files and system debug information

Academic proof-of-concept demonstrating CVE-2026-21445 [LangFlow] for authorized security research.

This script exploits CVE-2025-62369 in Xibo CMS to execute a reverse shell command.

Ralph Wiggum plugin implementation that works after the CVE-2025-54795 security patch

CVE-2018-18820 checker for Icecast servers

A simple, educational proof-of-concept script demonstrating the zero-click account takeover vulnerability in the PrestaShop Checkout module (CVE-2025-61922).

🧨 CVE-2025-14783: Easy Digital Downloads Account Takeover PoC

Arbitrary Kernel Memory Write (Unchecked memmove)

This repository contains a Windows kernel driver and a PoC.

Vatilon-based IP camera firmware allows authentication bypass and plaintext credential exposure via web.cgi API requests.

Revotech I6032W-FHW IP camera firmware fails to validate authentication fields in API requests, allowing attackers to bypass authentication and retrieve admini…

Integer overflow in Apple ImageIO WebP parsing (macOS/iOS)

Authenticated Arbitrary File Read in pfSense 2.8.0 via Diagnostics Web Interface (CVE-2025-53392)

CVE-2024-41997 PoC - accompanies https://0day.gg/blog/warp-terminal-rce/

A public disclourse of CVE-2025-67730 in Frape lms By dharan ragunathan

CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE 0day Finder Quick

A technical case study and exploitation analysis of the Authentication Bypass vulnerability in TP-Link TL-WR840N firmware (CVE-2018-12633).

Official Walkthrough for lab React2Shell: CVE-2025-5182

CVE-2024-55374