Every new exploit,
on the radar.

Scripts for Analysis of a RCE in Moodle Calculated Questions (CVE-2024-43425)

🚀 Exploit for Moodle 4.4.0 Authenticated RCE (CVE-2024-43425) — run commands remotely ⚡

ASUS wifi router RCE vulnerability

CVE-2018-14714 PoC RCE

POC CVE-2018-14714

Time injector is a CVE-2018-14714 exploitation script

PoC of "DEF CON 32 - SQL Injection Isn't Dead Smuggling Queries at the Protocol Level - Paul Gerste"

Exploit for CVE-2023-29360 targeting MSKSSRV.SYS driver

POC for CVE-2023-29360

CVE-2022-37122 Path Traversal Scanner

Proof of concept for exploitation of the vulnerability described in CVE-2025-11554, which concerns the possibility of a privilege escalation through arbitrary …

Ivanti EPMM Pre-Auth RCE Chain

Group project — CVE-2025-54793 detection & mitigation (Bhuvanesh, Shiva, Emma)

Proof-of-Concept script for WordPress plugin Bit File Manager version 6.0 - 6.5.5 Unauthenticated Remote Code Execution via Race Condition (CVE-2024-7627) vuln…

POC CVE-2024-7627

THREE different reproduction, WORKDIR, EXEC & RUNC.

CVE-2025-60880 - Stored Cross-Site Scripting (XSS) in Bagisto Admin Panel

CVE-2025-55903 — Stored HTML Injection in PerfexCRM < 3.3.1 (Invoice/Client Communication)

CVE-2025-60378 — Stored HTML Injection in RISE — Ultimate Project Manager & CRM < 3.9.4 (Invoices & Messaging)

Reflected Cross-Site Scripting (XSS) in Xibo CMS v4.1.2 from Xibo Signage, due to a lack of proper validation of user input.

Apache OFBiz RCE Scanner & Exploit (CVE-2024-38856)

CVE-2024-38856 Exploit

Apache OFBiz CVE-2024-38856

CVE-2024-38856: Apache OFBiz remote code execution Scanner & Exploit

Perform With Massive Apache OFBiz Zero-Day Scanner & RCE

Exploit for CVE-2024-38856 affecting Apache OFBiz versions before 18.12.15

Nuclei template to scan for Apache Ofbiz affecting versions before 18.12.15

Tentang Pemindai & Eksploitasi Apache OFBiz RCE (CVE-2024-38856)

PoC CVE-2023-29386 — Manager for Icomoon < 2.1 - Unauthenticated Arbitrary File Upload

This script automatically detects and remediates **CVE-2025-11449** and **CVE-2025-11450** security vulnerabilities in ServiceNow UI Macros. These critical vul…

Stored XSS in ReNgine <= 2.2.0 — public disclosure

ksmbd: Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen.

Cookie-based authentication vulnerability on Tk-Rt-Wr135G

Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation

Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation

Exploit for CVE-2025-10352. Admin account creation on Melis Platform Framework