Every new exploit,
on the radar.

This script exploits a remote command execution vulnerability under the oal_startPing component in the TPLink WR840N router.

This script exploits a remote command execution vulnerability under the oal_setIp6DefaultRoute component in the TPLink WR840N router.

This script exploits a vulnerability in the OMCISHELL object for C-DATA proprietary routers such as BESTCOMs.

Exploit PoC for CVE-2020-18324

Exploit for CVE-2022-22845 - Unauthenticated Admin Takeover On QXIP SIPCAPTURE Homer-App up to 1.4.27

This is the repository used for CVE-2017-7651 for exploiting mosquitto 1.4.14

PoC for CVE-2017-7651

CVE-2021-24084 Windows Local Privilege Escalation Left officially unpatched since 2020. Hence, its still a zero day

Windows MDM LPE

CVE-2022-25375 - Demo exploit of RNDIS USB Gadget

Support ALL Windows Version

CVE-2020-0787的简单回显

CVE-2021-1965 WiFi Zero Click RCE Trigger PoC

Bypassing Linux Executable Space Protection using 20+ years old tools (CVE-2022-25265).

[CVE-2018-6479] Netwave IP Camera server vulnerable to Denial of Service via one single huge POST request.

Pi-hole Remote Code Execution authenticated Version >= 4.3.2

A Python script to exploit CVE-2020-8816, a remote code execution vulnerability on the Pi-hole

Pi-hole ( <= 4.3.2) authenticated remote code execution.

A PoC for CVE-2020-8816 that does not use $PATH but $PWD and globbing

A potential Denial of Service issue in protobuf-java high severity GitHub Reviewed Published 5 days ago in protocolbuffers/protobuf • Updated yesterday Vulnera…

WordPress File Upload Vulnerability, Modern Events Calendar Lite WordPress plugin before 5.16.5

CVE-2022-25258 - Demo exploit targeting usb gadget's os descriptor handler

Authenticated reflected XSS in TastyIgniter version v3.2.2.

Reflected Cross-site scripting (XSS) vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the search_term parameter in the modules/S…

Stored XSS Vulnerability on RosarioSIS 8.2.1