Every new exploit,
on the radar.

Disclosure for CVE-2025-63602, including a PoC for use of an insecure driver in Awesome Miner 11.2.4 leading to arbitrary kernel read/write to MSRs, resulting …

Workaround for CVE-2025-52881: Fixes Docker/Podman breakage in Proxmox LXC containers caused by AppArmor incompatibility with runc 1.2.7+. Universal wrapper fo…

Proof of Concept of CVE-2025-48507. The security flaw can be leveraged by Non-Secure software (e.g., Linux) to break Trust Zone and gain access to Secure world

A critical RCE vulnerability in Windows TCP/IP stack (CVE-2025-26686) leaves sensitive memory unlocked, allowing remote attackers to hijack systems. Exploitabl…

POC for CVE-2025-26686 - A critical RCE vulnerability in Windows TCP/IP stack (CVE-2025-26686) leaves sensitive memory unlocked, allowing remote attackers to h…

Vatilon-based IP camera firmwares issue Session-Id tokens without verifying credentials, allowing attackers to obtain sessions and retrieve plaintext account c…

This repository contains some python scripts implementation for the MS08-067 Windows Server Service vulnerability (CVE-2008-4250). This is a classic remote cod…

Scripts to analyze conflicker worm which exploits famous netapi vulnerability (CVE-2008-4250) i.e MS08-067

MS08-067 | CVE-2008-4250

This repository contains a Metasploit module implementation for the MS08-067 Windows Server Service vulnerability (CVE-2008-4250). This is a classic remote cod…

XSS vulnerability in SourceCodester Student Grades Management System (CVE-2025-63892)

Proof of Concept for Stored-XSS on Vulnerable WP-Statistics Plugin known as CVE-2025-9816

Writeup and code for CVE-2025-11492, CVE-2025-11493 - RCE in ConnctWise Automate RMM via Adversary-in-the-Middle

iOS browser exploit for CVE-2020-9802, an old JIT bug.

PoC exploit for CVE-2024-4890: Sudo privilege escalation via neecdrestart (>=3.8). Ethical lab-only. Scripts in Python and C.

Identified a Stored Cross-Site Scripting (XSS) vulnerability in CKFinder v1.4.3 via malicious SVG file upload leading to script execution upon file preview.

CVE-2025-56503 : Sublime Text 4 4200

WP移行専用プラグイン for CPI <= 1.0.2 - Unauthenticated Arbitrary File Upload

CVE-2025-41244 is a critical local privilege escalation vulnerability in VMware Aria Operations and VMware Tools

Detection for CVE-2025-41244

VMware Aria Operations < 4.18.5 & VMware Tools - Local Privilege Escalation

POC CVE-2025-9223

Demonstrating the usage of Fastrtps-DDS vulnerability CVE-2024-28231 within Ros2

TNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover

Professional cybersecurity assessment demonstrating vulnerability identification, CVSS severity scoring, MITRE ATT&CK framework application, and detailed remed…

Professional cybersecurity assessment demonstrating vulnerability identification, CVSS severity scoring, MITRE ATT&CK framework application, and detailed remed…

POC for CVE-2024-31982: XWiki Platform Remote Code Execution > 14.10.20

A tool for vulnerability detection and exploitation tool for CVE-2024-31982

Vulnerability for Xwiki