Every new exploit,
on the radar.

RCE exploit for low privileged user via CSRF in open-webui

CVE-2018-16431 mass scanner and single target scan.

RSVPMarker <= 10.6.6 - Unauthenticated SQL Injection

A security vulnerability in SuiteCRM that can be exploited to steal CSRF tokens and perform unauthorized actions, such as creating new administrative users wit…

Exploits for CVE-2017-6008, a kernel pool buffer overflow leading to privilege escalation.

1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass via Account Takeover

Meetup <= 0.1 - Authentication Bypass via Account Takeover

A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject…

This repo contains all the work surrounding the development of the PoC for CVE-2024-48208, and how a simple OOB(Out-of-bound) read can result in jail escapes a…

Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Upload

Exam Matrix <= 1.5 - Unauthenticated Privilege Escalation

PegaPoll <= 1.0.2 - Unauthenticated Arbitrary Options Update

This is a simple POC to for show the pfsense 2.7 Command injection Vulnerability ( CVE-2023-42326)

Exploit and writeup for installed app to root privilege escalation through CVE-2024-48336 (Magisk Bug #8279), Privileges Escalation / Arbitrary Code Execution …

Signup Page <= 1.0 - Unauthenticated Arbitrary Options Update

GRÜN spendino Spendenformular <= 1.0.1 - Unauthenticated Arbitrary Options Update