Every new exploit,
on the radar.

LINKSYS AC1900 EA7500v3 IGD UPnP Stack Buffer Overflow Remote Code Execution Vulnerability

Ruby On Rails unrestricted render() exploit

Remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data.

Proof of concept showing how CVE-2016-2098 leads to remote code execution

This exploit is remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data

CVE-2016-2098 POC

A PoC of CVE-2016-2098 (rails4.2.5.1 / view render)

Proof of concept CVE-2016-2098

CVE-2016-2098 simple POC written in bash

PoC code to download files with CVE-2024-32830

longitudes de código para desencadenar esta vulnerabilidad

Flask CVE-2023-30861 Poc 환경구축

USOM Tarafından resmi yayın beklenmektedir.

A proof-of-concept exploit for CVE-2025-32433, a critical vulnerability in Erlang's SSH library that allows pre-authenticated code execution via malformed SSH_…

Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7…

This repository provides a Docker container for simulating the CVE-2023-30212 vulnerability, allowing you to practice and understand its impact. It includes a …

This contains the necessary files and Docker to replicate A vulnerability in OURPHP that has a XSS Vulnerability (CVE-2023-30212)

GitHub repository with Dockerfile and files to create a vulnerable environment for CVE-2023-30212, enabling exploration of the exploitability of this security …

Docker environment and exploit the CVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0 .This vulnerability al…

Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7…

tar-fs file write/overwrite vulnerability

unzip-stream file write/overwrite vulnerability

⚠️⚠️ CVE-2024-7120 Command Injection Vulnerability in RAISECOM Gateway Devices

CVE Kodu: CVE-2025-32965 Zafiyet Türü: Supply Chain Attack (CWE-506: Embedded Malicious Code) Hedef: xrpl.js kütüphanesinin 4.2.1–4.2.4 ve 2.14.2 versiyonlar…

WordPress Verification SMS with TargetSMS Plugin <= 1.5 is vulnerable to Remote Code Execution (RCE)

libAppleArchive exploit maker, read the writeup here https://snoolie.gay/blog/CVE-2024-27876

CVE-2020-10257 exploit script

SQLi ITC Multiplan v3.7.4.1002 (CVE-2025-29529)

This demo application partially covers the vulnerability CVE-2024-38828

CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

WordPress WP Remote Thumbnail Plugin <= 1.3.2 is vulnerable to Arbitrary File Upload

A new vulnerability has been discovered in GNU Mailman 2.1.39, bundled with cPanel/WHM, allowing unauthenticated remote attackers to read arbitrary files on th…