Every new exploit,
on the radar.

CVE-2019-9053 Exploit for Python 3

The exploit is edited to work with different text encodings and Python 3 and is compatible with CMSMS version 2.2.9 and below.

This script is a modified version of the original exploit by Daniele Scanu which exploits an unauthenticated SQL injection vulnerability in CMS Made Simple <= …

Python3-converted exploit and research notes for CMS Made Simple (CVE-2019-9053) — Unauthenticated SQL Injection vulnerability. Includes original PoC, improved…

This is modified code of 46635 exploit from python2 to python3.

Unauthenticated Remote Code Execution – Bricks <= 1.9.6

Nuclei template and information about the POC for CVE-2024-25600

Unauthenticated RCE exploit for CVE-2024-25600 in WordPress Bricks Builder <= 1.9.6. Executes arbitrary code remotely.

This tool is designed to exploit the CVE-2024-25600 vulnerability found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticate…

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE - WordPress Bricks Builder Remote Code Execution (RCE)

Unauthenticated remote code execution vulnerability in WordPress Bricks Builder <= 1.9.6. The template render endpoint accepts PHP code without authentication,…

CVE-2024-25600 - Unauthenticated RCE exploit for WordPress Bricks Builder Theme. Advanced exploitation framework with interactive shell, reverse shells, file u…

Breaking git with a carriage return and cloning RCE

PoC for CVE-2025-48384

PoC dockerfile image for CVE-2025-48384

CVE-2025-48384 PoC

A proof of concept of remote code execution

for CVE-2025-48384 test

Standalone reproducer for CVE-2026-90781: 1-byte OOB write in alsa-lib __snd_ctl_ascii_elem_id_parse() name= parsing (quoted and unquoted)

Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.

This is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin menti…

CVE-2025-38352 kernel exploit for LG webOS Smart TVs (ARM64). Achieves persistent root on real consumer hardware with novel exploitation techniques. Responsibl…

The official Sentinel Edition v7.11 - Hypervisor Detection & Kernel Memory Audit Suite for Honor Magic V2. Investigating CVE-2025-38352 and EL2 RKP defenses.

PoC and GDB script assists in triggering CVE-2025-38352

Original research and PoC for a pre-auth stack buffer overflow via unbounded sscanf scanset in the Netis NC63 ipFilterList handler

Original research and PoC for a pre-auth Base64-decoded password stack buffer overflow in Netis NC63 login.cgi

JFrog Artifactory 预认证全链 RCE 复现项目（CVE-2026-42018 / CVE-2026-65616 / CVE-2026-65615）：完整攻击链报告、7.146.7 Docker 复现交付物（EXP / 部署 / 基线验证 / payload 样本 / 恢复工具）

Exploit for CVE-2026-23980 — Authenticated error-based SQL injection in Apache Superset < 6.0.0 via sqlExpression bypass

Modified exploit of CVE-2026-23980

Exploitation Training -- CVE-2013-2028: Nginx Stack Based Buffer Overflow

For the analysis of CVE-2013-2028

CVE-2013-2028 python exploit

this is not stable

A CVE-2013-2028 implementation

CVE-2013-2028复现

Tool for checking Nginx CVE-2013-2028

Unpatched Discord privacy leak allowing presence inference while Invisible.

Safe local proof of concept for the Cotonti CommentsWidget PHP object injection vulnerability (CAN-2026-2035973 / CVE-2026-71294).

WooCommerce plugin: photo & video product reviews, closing CVE-2026-12684's unauthenticated-upload vulnerability class by construction

WooCommerce plugin: safe formula-based product pricing, closing CVE-2026-4001's eval()-based RCE

Sell bookable services and appointments through WooCommerce -- closes CVE-2026-2931 by construction.

Mitigation scripts for CVE-2026-50751

CVE-2026-50751

PoC de CVE-2026-50751: bypass de autenticacion IKEv1 en Check Point Remote/Mobile Access.

A web version of the bash scripts wrote for Check Point CVE-2026-50751 and CVE-2026-50752. This uses a local server to scan and make changes using Check Point…

Bypass de autenticación por certificado en la VPN Remote-Access de Check Point (IKEv1).

CVE-2026-50751 Check Point IKEv1 vulnerability scanner

IKEv1 VPN scanners, attempts a Check Point authentication-bypass exploit, and includes internal network scanning and reverse-shell features.

Comprehensive multi-layer defense system against Adobe Flash CVE exploits (CVE-2012-0754, CVE-2015-xxxx, CVE-2016-xxxx, CVE-2018-xxxx) with browser, mobile, se…

Downgrade attack for CVE-2025-48804

Security advisory for TOTOLINK a720r buffer overflow vulnerability

Let's hijack our bootchain - CVE-2021-30327

Unlock the bootloader of any exploitable device vulnerable to CVE-2021-30327

Newfold plugins (wp-module-data <= 2.9.7) Unauthenticated

In the miniOrange 2FA WordPress plugin (versions before 6.3.1 and 19.3), the two-factor authentication (2FA) attempt limit is flawed.

Standalone proof of concept for CVE-2026-86547, a NULL pointer dereference in mrubyc op_enter() through 4.0.0.