Every new exploit,
on the radar.

A vulnerable driver exploited by me (BYOVD) that is capable of terminating several EDRs and antivirus software in the market, rendering them ineffective, worki…

PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Unauthenticated Arbitrary File Download

PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Unauthenticated Arbitrary File Download

Python code for expoiting of vulnerability in wlan driver of MediaTek SOCs MT6890, MT7622, MT7915, MT7916, MT7981, MT7986

Schneider Electric PowerChute Serial Shutdown vulnerability.

Unauthenticated Local File Inclusion

WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion

CVE-2023-24278 - Reflected XSS Vulnerabilities in Squidex

Vehicle Management System 1.0 - Stored Cross-Site Scripting (XSS)

SQL Injection Vulnerability in Vehicle Management System 1.0 - 1.3

Critical 0 Day in Car Rental Management System Versions 1.0 - 1.3

Productization efforts of CVE-2020-11179 Adreno-Qualcomm-GPU bug, original poc by Ben Hawkes of P0

FOG Project CVE-2024-39914 命令执行漏洞

CVE-2024-27292 : Docassemble V1.4.96 Unauthenticated Path Traversal

Docassemble任意文件读取漏洞(CVE-2024-27292)

poc for CVE-2022-32981 under work

WordPress Elementor 3.6.0 3.6.1 3.6.2 RCE POC

The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the ~/c…

POC for CVE-2024-40348. Will attempt to read /etc/passwd from target

Bazaar v1.4.3 任意文件读取漏洞(CVE-2024-40348)

CVE-2024-0132 – Fully Weaponized NVIDIA Container Toolkit Exploit

TOTOLINK A6000R 命令执行漏洞（CVE-2024-41319）

CVE-2024-35176 poc full

CVE-2024-39908 full poc

Quietly Insights <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Minterpress <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

CVE-2024-10793 poc exploit

Collapsing Categories <= 3.0.8 - Unauthenticated SQL Injection