Every new exploit,
on the radar.

Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload

Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload

Multi-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV reporting and expl…

Script para determinar si Citrix es vulnerable al CVE-2025-6543

Citrix Bleed 2 PoC

A Writeup for Sleirsgoevy's version of the Exploit Implementation of CVE-2018-4386 by Fire30 called Bad_Hoist

ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate normal user…

CVE-2025-45407: Multiple XSS Vulnerabilities in DiscoveryNG v6.0.8 Hotfix 2 Discovered by: YallaSec Security Research Team CVE ID: CVE-2025-45407 Date Publishe…

This repository contains a Proof of Concept (PoC) exploit for the **CVE-2025-47175** vulnerability found in Microsoft PowerPoint. The vulnerability is a Use-…

PoC for CVE-2025-38089

A minimal reproduction of an AngularJS <textarea> XSS vulnerability on IE (tracked as CVE-2022-25869).

CVE-2017-16921: In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is l…

PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.

PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.

PoC for a Chrome SKSL bypass + integer overflow -> OOB write vulnerability I reported to Google in Skia.

PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.

WordPress Custom Login And Signup Widget Plugin <= 1.0 is vulnerable to Arbitrary Code Execution

WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of us…

Updated POC for Unauth Post Author Email Disclosures WordPress CVE-2023-5561

CVE-2023-5561-PoC

A proof‑of‑concept command‑line tool in C for detecting the SQL injection vulnerability .

Simulação educacional de exploração de falha em dispositivos IoT com base no CVE-2017-17761

This Python script is a Proof-of-Concept (PoC) scanner for detecting the vulnerability CVE-2024-40898, which affects Apache HTTP Server’s SSL certificate valid…

This Python script checks for the presence of CVE-2024-40898, a critical vulnerability in Apache HTTP Server that may allow SSL/TLS certificate verification by…

Multiple Brother Devices: Multiple Vulnerabilities (CVE-2024-51977, CVE-2024-51978, CVE-2024-51979, CVE-2024-51980, CVE-2024-51981, CVE-2024-51982, CVE-2024-51…

Just poc for CVE 2024-54085

POCs of CVE-2024-10654, CVE-2025-6916

POCs of CVE-2024-10654, CVE-2025-6916

Escape macOS Sandbox using sharedfilelistd exploit