Every new exploit,
on the radar.

PoC for 2023-52709 - TI Bluetooth stack can fail to generate a resolvable Random Private Address (RPA) leading to DoS for already bonded peer devices.

A proof of concept of traefik CVE to understand the impact

MAximo SQL Injection Time Based - Oracle DB

Relevanssi – A Better Search <= 4.22.0 - Missing Authorization to Unauthenticated Query Log Export

PoC CVE-2024-7646

PoC CVE-2024-7646

Public Disclosure

Public Disclosure of CVE-2024-44346

Proof-of-Concept for CVE-2024-47066

Authenticated Privilege Escalation to Admin exploiting Uncanny Groups for LearnDash.

REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection

WBW Product Table Pro <= 1.9.4 - Unauthenticated Arbitrary SQL Execution to RCE

Analysis , Demo exploit and poc about CVE-2024-37084

Spring Cloud Remote Code Execution

WP Email Users <= 1.7.6 - SQL Injection

the

This script checks if each domain from a given domain list is vulnerable to CVE-2006-0987

PoC of CVE-2019-14322: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Nmap NSE script to detect CVE-2019-14322 of Pallets Werkzeug path traversal via SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames

Modification of: PoC of CVE-2019-14322: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Proof Of Concept for CVE-2024-1874

Academy LMS <= 5.10 CSRF

Academy LMS <= 5.10 CSRF / XSS

Academy LMS <= 5.10 CSRF

Webrun <= 3.6.0.42 SQLi