Every new exploit,
on the radar.

POC for SQLi vulnerability in Icegram express

build-script for CVE-2024-46507 and CVE-2024-46508

CVE-2022-3910

使用两种不同的角度实现对于CVE-2022-3910的利用

Hi, I am Chirag Artani. This is the POC of Reflected XSS in Essential Addons for Elementor Affecting 2+ Million Sites - CVE-2025-24752

POC for CVE-2025-24752.

CVE-2025-26202

Proof of concept created for CVE-2022-35978 for educational purposes only.

Proof of Concept (POC) for the CVE-2025-25296 vulnerability affecting Label Studio versions prior to 1.16.0

CVE-2025-24971 exploit

POC CVE-2025-26318

CVE-2025-0364: BigAnt Server RCE Exploit

WordPress ACF City Selector plugin <= 1.14.0 - Arbitrary File Upload vulnerability

Blocking Windows EDR agents by registering an own IPC-object in the Object Manager’s namespace (CVE-2023-3280, CVE-2024-5909, CVE-2024-20671)

Blocking Windows EDR agents by registering an own IPC-object in the Object Manager’s namespace (CVE-2023-3280, CVE-2024-5909, CVE-2024-20671)

Analysis of a logic vulnerability in the macOS SSH client leading to client passphrase exposure to a local attacker

CVE-2018-13382

PoC for CVE-2018-13382, never successfully tested so swim at your own risk

CVE-2025-25369

SeedDMS Stored Cross Site Scripting(XSS)

WP Load Gallery <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload

Crafthemes Demo Import <= 3.3 - Authenticated ( Admin+) Arbitrary File Upload in process_uploaded_files

Ghost-CMS Exploit is python script. This script first performs brute-force authentication attempts using the provided wordlists. If valid credentials are found…

OpenSSL DTLS CVE-2014-0221 Remote Denial

Vuln disclosure for XOne app