Every new exploit,
on the radar.

Insecure attachment handling when using Canary Mail or Blue mail

Detection for CVE-2025-61675, CVE-2025-61678 & CVE-2025-66039

PoC CVE-2017-5123 - LPE - Bypassing SMEP/SMAP. No KASLR

Exploit for the linux kernel vulnerability CVE-2017-5123

Source code and configuration files related to our article in MISC96

linux kernel exploit

PoC of CVE-2025-45805

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "…

Proof of Concept for CVE-2025-6218, demonstrating the exploitation of a vulnerability in WinRAR versions 7.11 and under, involving improper handling of archive…

CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user ext…

A simple proof of concept for WinRAR Path Traversal | RCE | CVE-2025-6218

RARLAB WinRAR Directory Traversal Remote Code Execution

Comprehensive analysis and proof-of-concept for CVE-2025-6218 - WinRAR path traversal RCE vulnerability affecting versions 7.11 and earlier

exploit for f5-big-ip RCE cve-2023-46747

#F5-BIG-IP-CVE-2023-46747-Exploit – Unauthenticated RCE Python exploit & Nuclei template by Raguraman ✓ Automated TCP reverse shell (LHOST/LPORT) ✓ Teste…

An Exploitation script developed to exploit the CVE-2023-46747 which Pre Auth Remote Code Execution of f5-BIG Ip producs

CVE-2023-46747 Criticle Auth Bypass

CVE-2023-46747-RCE PoC

File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read

Unauthenticated Arbitrary File Read exploit for WordPress File Away Plugin ≤ 3.9.9.0.1

CVE-2025-2539 - WordPress File Away <= 3.9.9.0.1 - Arbitrary File Read

CVE-2025-2539 - File Away WordPress Plugin Arbitrary File Read

Simplified Version of Cryptography Attack based on Birthday Paradox: Sweet32 (CVE-2016-2183)

Batch upgrade all your Next.js apps to patched versions - fight back against CVE-2025-55183/55184/67779

PoC for CVE-2025-55183

Security research lab for CVE-2025-55183 and CVE-2025-55184 in React Server Components

CVE-2025-55183 POC

A CVE-2025-55183 secret miner

CVE-2025-55183 Scanner

Exploit for CVE-2025-11001 or CVE-2025-11002

CVE-2025-11001 (CVSS 7.0) – 7-Zip < 25.00 Directory Traversal → RCE via crafted ZIP with symlink. Allows arbitrary file write when extracted as Administrator. …

A scanner and testter of the CVE-2025-11001 of 7-zip

Exploit for CVE-2025-11001

CVE-2025-43426 (video + report)

This repository is to demonstrate and practice my forensic/vulnerability analysis skills by reproducing a web-related CVE in a safe environment.

CVE-2020-0014-Toast-复现

CVE-2020-0014

Unauthenticated Remote Code Execution in SPIP versions up to and including 4.2.12

Unauthenticated Remote Code Execution in SPIP versions up to and including 4.2.12

This exploit will attempt to execute system commands on SPIP targets.

The porte_plume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthentic…

Exploitation of a Remote Code Execution vulnerability- (CVE-2024-7954)

SPIP 4.30-alpha2、4.2.13、4.1.16之前的版本使用的porte_plume插件存在任意代码执行漏洞，远程未经身份验证的攻击者可以通过发送精心设计的HTTP 请求以SPIP用户身份执行任意PHP代码。

CVE-2025-55816 HotelDruid 3.0.7