Every new exploit,
on the radar.

Bug bounty and vulnerability research reports by Desai Vinayak — includes CVE-2023-50290 (Apache Solr) and Zscaler subdomain takeover findings.

g-FFL Cockpit <= 1.7.1 - Improper Authorization to Unauthenticated Product Deletion

g-FFL Cockpit <= 1.7.1 - Missing Authorization to Unauthenticated Information Exposure

Flex QR Code Generator <= 1.2.6 - Unauthenticated Arbitrary File Upload

PoC for CVE-2025-54782

CVE-2025-54782

A PoC script for demonstrating CVE 2025-64458, found in Django, potential DoS in `HttpResponseRedirect`/`HttpResponsePermanentRedirect` on Windows.

RestroPress – Online Food Ordering System 3.0.0 - 3.1.9.2 - Unauthenticated Information Exposure to Authentication Bypass via Forged JWT

An authenticated Stored Cross-site Scripting (XSS) vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager inte…

CVE-2025-53690 POC

Detection for CVE-2025-53690

This is CVE-2025-53690 Analysis Documents.

POC_CVE-2024-46256

CVE-2024-46256 tool

CVE-2025-56383-Proof-of-Concept

DLL hijacking to rev shell

this is a practice example of how exploit vulnerability CVE-2021-4773 with a virtual machine

POC for CVE-2024-40815 (Construction is in its final stage ==IOS 17.0)

Authenticated low-privileged RCE in Coolify via unsanitized shell commands in the Git Repository field.

Apache's commons-lang2 v2.6 with a backported fix for CVE-2025-48924

HP Sound Research SECOMNService Escalation of Privilege

shiro 路径穿越

CVE-2014-9219 XSS POC

PrestaShop AdminLogin Email Enumeration PoC - CVE-2025-51586. This repository provides an ethical Proof-of-Concept (PoC) for the PrestaShop vulnerability allow…

the information for the vulnerability covered by CVE-2025-29632