Every new exploit,
on the radar.

Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)

This is a proof of concept of the critical WinBox vulnerability (CVE-2018-14847) which allows for arbitrary file read of plain text passwords. The vulnerabili…

MikroTik RouterOS Winbox未经身份验证的任意文件读/写漏洞

PoC of CVE-2018-14847 Mikrotik Vulnerability using simple script

Automated version of CVE-2018-14847 (MikroTik Exploit)

C# implementation of BasuCert/WinboxPoC [Winbox Critical Vulnerability (CVE-2018-14847)]

Mass MikroTik WinBox Exploitation tool, CVE-2018-14847

By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions:

CVE-2017-17215 HuaWei Router RCE (NOT TESTED)

A Remote Code Execution (RCE) exploit for Huawei HG532d based on CVE-2017-17215 vulnerability. Modded from original PoC code from exploit-db.com

POCsuite与goland实现华为HG532路由器命令注入CVE-2017-17215 POC

This interactive suite targets CVE-2014-9222 (Misfortune Cookie) in legacy RomPager web servers, alongside modular testing for CVE-2017-17215 (Huawei HG532 RCE…

Lets have fun by digging into a Zyxel router firmware and MIPS Arch

Lets have fun by digging into a Zyxel router firmware and MIPS Arch

This interactive suite targets CVE-2014-9222 (Misfortune Cookie) in legacy RomPager web servers, alongside modular testing for CVE-2017-17215 (Huawei HG532 RCE…

Using TCP Fast Open to bypass syscall-based networking rules (CVE-2026-63828/CVE-2026-72243 PoC)

CVE-2026-77276 pre-auth macro RCE via convert-to on Collabora Online

Remote Code Execution in DbGate via functionName injection in the loadReader endpoint — CVSS 8.8

SQL injection in Dagster database I/O managers via dynamic partition keys — CVE-2026-41490 / CVSS 8.3

JupyterHub CSRF via cross-origin form POST — CVE-2026-40864 / CVSS 5.4

CRLF email header injection in Plunk raw MIME construction — CVE-2026-34975 / CVSS 8.5

OS command injection in KubeAI via an Ollama model URL — CVE-2026-34940 / CVSS 8.7

Unauthenticated SSRF in the Chamilo LMS PENS plugin — CVE-2026-34160 / CVSS 8.6

KQL injection in adx-mcp-server via table_name — CVE-2026-33980 / CVSS 8.3

Unauthenticated SSRF and open email relay in Chamilo LMS — CVE-2026-33715 / CVSS 7.2

Cypher injection in Graphiti via unsanitized node_labels — CVE-2026-32247 / CVSS 8.1

Arbitrary file read in mcp-atlassian via confluence_upload_attachment — CVE-2026-77262 / GHSA-p6hp-93wp-fh6p

Root-cause analysis and patch validation of CVE-2023-52356 in libtiff using AddressSanitizer and GDB.

PoC (DoS + scanner) for CVE-2020-0609 & CVE-2020-0610 - RD Gateway RCE

PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610

A proof-of-concept scanner to check an RDG Gateway Server for vulnerabilities CVE-2020-0609 & CVE-2020-0610.

Scanning for Remote Desktop Gateways (Potentially unpatched CVE-2020-0609 and CVE-2020-0610)

BlueGate Exploit validator - RD Gateway validator for CVE-2020-0609 and CVE-2020-0610 (BlueGate) using OpenSSL DTLS over UDP/3391.

Security-research lab: CVE-2026-47172 (workflow_run pwn request in deploy.yaml) — flattened snapshot of duck-organization/questbot at 1903b2f

Cypht CVE-2026-71981 PoC

Metasploit-based penetration test on an isolated Metasploitable2 lab VM — remote exploitation via DistCC (CVE-2004-2687), privilege escalation via udev netlink…

Linux Kernel Exploits -> CVE-2009-1185 + CVE-2009-1337 + CVE-2009-2692 + CVE-2009-2698 + CVE-2009-3547

Linux Kernel Exploits -> CVE-2006-2451 + CVE-2006-3626

Linux Kernel Exploits -> CVE-2005-0736 + CVE-2005-1263

Linux Kernel Exploits -> CVE-2004-0077 + CVE-2004-1235 + caps_to_root