Every new exploit,
on the radar.

A repository of proof-of-concept files demonstrating disclosed and patched vulnerabilities in pngcheck (2.4.0 - 3.0.1), including CVE-2020-27818, CVE-2020-3551…

CVE-2019-18818/19606 Strapi RCE

Exploit script showcasing a mixture of CVE-2019-18818 and CVE-2019-19609 for unauthenticated remote code execution in Strapi CMS.

This repository contains a Python script to exploit two vulnerabilities: CVE-2019-18818 and CVE-2019-19609.

Explore CVE-2023-33580 (XSS) & CVE-2023-33584 (SQLI) discovered by me. Dive into vulnerabilities and exploits for insights.

FileOrganizer <= 1.0.9 - Authenticated (Subscriber+) Arbitrary File Upload

CVE-2025-25965 is a newly discovered CSRF vulnerability in the Phpgurukul Online Banquet Booking System v1.2, allowing remote attackers to change a user’s emai…

A critical SQL Injection vulnerability (CVE-2025-25964) discovered in the School Information Management System v1.0

Zimbra 10 SQL Injection (CVE-2025-25064) Analysis Article

This repository documents an unauthenticated GPON manipulation vulnerability discovered in certain Arcadyan routers.

An issue in Orbe ONetView Roteador Onet-1200 Orbe 1680210096 allows a remote attacker to escalate privileges via the servers response from status code 500 to s…

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted reso…

Ivanti Pulse Secure CVE-2023-46805 Scanner - Based on Assetnote's Research

Mitigation validation utility for the Ivanti Connect Around attack chain. Runs multiple checks. CVE-2023-46805, CVE-2024-21887.

Scanner for CVE-2023-46805 - Ivanti Connect Secure

A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282, CVE-2023-46805, an…

Simple scanner for scanning a list of ip-addresses for vulnerable Ivanti Pulse Secure devices

The script in this repository only checks whether the vulnerabilities specified in the Ivanti Connect Secure product exist.

CVE-2023-46805 Ivanti POC RCE - Ultra fast scanner.

CVE-2016-6914-UniFiVideo-LPE

Public Disclosure of CVE-2024-10930

Exploit POC Code for CVE-2024-55968

POC for DTEX LPE (CVE-2024-55968)

A flaw was found in pki-core. Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote a…

is a PoC script for demonstrating an XML External Entity (XXE) vulnerability exploitation

CVE-2022-2414 POC

Exploit for CVE-2023-26326 in the WordPress BuddyForms plugin, leveraging CVE-2024-2961 for remote code execution. This exploit bypasses PHP 8+ deserialization…