Every new exploit,
on the radar.

CVE-2020-26217 XStream RCE POC

CVE-2020-26217 && XStream RCE

CVE-2020-26217 XStream反序列化的poc

xstream with CVE-2020-26217

deco-cx apps Parameter analyticsScript.ts AnalyticsScript server-side request forgery

Proxmox VE Arbitrary File Read -> Full System Compromise . Not Testeted yet... will test them this week

CVE-2024-10220 Test repo

CVE-2024-10220 POC

CVE-2024-10220 reveals a critical flaw in Kubernetes’ deprecated gitRepo volume type, allowing attackers to execute arbitrary commands via malicious .hooks scr…

Testing CVE-2024-10220 for HPC security research

N-day Exploit for Synology BeeStation RCE by DEVCORE (Pwn2Own 2024)

PoCs for CVE-2025-57199, CVE-2025-57200, CVE-2025-57201, CVE-2025-57202, and CVE-2025-57203

SyncShield - Browser Extension to Detect Unsafe Rsync Commands (CVE-2018-5764)

Analysis and reproduction of CVE-2025-57833

We've set up an environment to test CVE-2025-57833. This environment was built using AI, so it's subject to ongoing modification.

Example Vulnerable application for CVE-2025–57833

CVE-2025-57833 PoC (취약한 도서 검색 서비스)

Docker container to setup a vulnerable elfinder version on both nginx and apache servers. Can be used to test vulnerability POC

Exploit for Werkzeug < 3.1.4 (CVE-2023-46136)

CVE-2025-54352 PoC

This is my own written POC on the xmlrpc-pingback vulnerabiity found on wordpress. CVE-2025-54352.

CrushFTP before 11.3.7_60 is vulnerable to HTML Injection. The Web-Based Server has a feature where users can share files, the feature reflects the filename to…

PowerShell script that can help you automate updating the Windows Recovery Environment (WinRE) on deployed devices to address the security vulnerabilities in …

PowerShell script to fix WinRE/Recovery partition issues - KB5034441, KB5028997, CVE-2024-20666 Windows Update failures

CVE-2024-20666 vulnerability Solution patch failures in the Windows Recovery Environment (WinRE).

CVE-2025-59390 and ThreadLocalRandom Inverse

Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /classes/Login.php Due to invalid Content-Type

CVE-2024-3661 TunnelVision

Demo TunnelVision vulnerability for VPN using DHCP option 121

CrushFTP11 before 11.3.7_57 is vulnerable to stored HTML injection in the CrushFTP Admin Panel (Reports / "Who Created Folder"), enabling persistent HTML execu…

A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to e…

PoC for CVE-2025-10230 - Samba WINS hook command injection

CVE-2025-10230 PoC - Samba WINS Hook Command Injection

OS command injection vulnerability in Samba that received the maximum possible CVSS v3.1 score of 10.0

Exploit for CVE-2023-27532 against Veeam Backup & Replication

POC for Veeam Backup and Replication CVE-2023-27532

Directory transversal to remote code execution

CVE-2019-16728 Proof of Concept

A quick python exploit for the Nostromo 1.9.6 remote code execution vulnerability. Simply takes a host and port that the web server is running on.

Python script to exploit RCE in Nostromo nhttpd <= 1.9.6.

CVE-2019-16278Nostromo httpd命令执行

PoC RCE exploit for Nostromo nhttpd ≤ 1.9.6

CVE-2019-16278 Python3 Exploit Code

(Nhttpd) Nostromo 1.9.6 RCE due to Directory Traversal

CVE-2023-1189 PoC & Exploit

Proof of Concept exploits for CVE-2025-34322 and CVE-2025-34323 in Nagios Log Server