Every new exploit,
on the radar.

CVE-2024-4295 Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash

CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Admini…

CVE-2023-20598 Kernel Driver - Elevation of Privilege

CVE-2024-37051 poc and exploit

Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)

Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)

Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection

CVE-2024-30212

CVE-2024-20338 talk for Behind The Code Talk

This repository contains the exploit code for CVE-2023-33105, a vulnerability identified in Qualcomm devices. The exploit leverages authentication frames to pe…

The public reference that contains the minimum require information for the vulnerability covered by CVE-2024-36821

Vulnerability check script for CVE-2024-37393 (SecurEnvoy MFA 9.4.513)

Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC.

CVE-2021-42562: Improper Access Control in MITRE Caldera

CVE-2021-42561: Command Injection via the Human Plugin in MITRE Caldera

CVE-2021-42560: Unsafe XML Parsing in MITRE Caldera

CVE-2021-42559: Command Injection via Configurations in MITRE Caldera

CVE-2021-42558: Multiple Cross-Site Scripting in MITRE Caldera

CVE-2019-10092 Docker - Apache HTTP Server

CVE-2019-10092: Limited Cross-Site Scripting via "Proxy Error" Page in Apache HTTP Server

Chain CVE-2019-11408 – XSS in operator panel and CVE-2019-11409 – Command injection in operator panel.

DLL Injection and CVE-2010-3124

The Porygon-Z that's super effective against Secure Boot! (CVE-2022-30203, CVE-2023-21560, CVE-2023-28269, CVE-2023-28249, and more...)