Every new exploit,
on the radar.

The Ultimate WordPress Toolkit – WP Extended <= 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module

CVE-2024-54880

Eyewear prescription form <= 4.0.18 - Missing Authorization to Unauthenticated Arbitrary Options Update

CVE-2024-54879

CVE-2024-57522 - Stored XSS Vulnerability in Users.php - SourceCodester Packers and Movers Management System 1.0

CVE-2024-55504

cve-2024-38821

Zita Site Builder <= 1.0.2 - Missing Authorization to Arbitrary Plugin Installation

PoC: Plugin: Zita Site Builder <= 1.0.2 - Arbitrary Plugin Installation

Picsmize plugin for WordPress is vulnerable to arbitrary file uploads.

Picsmize <= 1.0.0 - Unauthenticated Arbitrary File Upload

cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件

A PoC for CVE-2022-34169, for the SU_PWN challenge from SUCTF 2025

https://nvd.nist.gov/vuln/detail/CVE-2022-34169

CVE-2024-57727

DATAGERRY Broken Access Control

Import Export For WooCommerce <= 1.5 - Authenticated (Subscriber+) Arbitrary File Upload

Exploit CVE-2024-54262: Arbitrary File Upload in Import Export for WooCommerce

PAN-OS auth bypass + RCE

Palo Alto Networks PAN-OS(CVE-2024-9474) POC

Palo Alto RCE Vuln

PoC for PAN-OS Exploit

Incorrect Privilege Assignment vulnerability in nssTheme Wp NssUser Register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a throu…

Wp NssUser Register <= 1.0.0 - Unauthenticated Privilege Escalation

CVE-2024-41454, CVE-2024-41453

Exihibitor Web Ui 1.7.1 RCE, CVE-2019-5029

This is a Python script PoC for CVE-2019-5029

PoC of CVE-2025-22710

The SSRF vulnerability in Microsoft Purview

CVE-2024-57523 - CSRF Vulnerability in Users.php - SourceCodester Packers and Movers Management System 1.0

Post Saint <= 1.3.1 plugin for WordPress Arbitrary File Upload