Every new exploit,
on the radar.

Reproducer for CVE-2026-63621 (Apache Camel camel-knative structured CloudEvent header injection) — Camel Spring Boot + Camel Quarkus

I have created AegisJava, a tool to fix (detect and mitigate) CVE-2025-30749.

Reproducer for CVE-2026-59230 (Apache Camel camel-mail MimeMultipart headersInline header injection) — Camel Spring Boot + Camel Quarkus

CVE-2025-48595 - Draft

PoC de CVE-2025-48595: desbordamiento de entero en multiples ubicaciones del Framework de Android.

CVE-2025-48595 Android Framework Integer Overflow PoC - 优化版

Lab for testing CVE-2018-5803

PoC for CVE-2024-23700, Android slient privilege escalation allow to read/write contacts, SMS, calendar, call log and voicemail, make outgoing calls or answer …

PoC for CVE-2024-23700, Android slient privilege escalation allow to read/write contacts, SMS, calendar, call log and voicemail, make outgoing calls or answer …

Source code minh họa máy chủ c2 demo kịch bản thực thi của CVE-2024-23700

Patch: Sandbox escape (macOS Kernel)

Patch: Privilege escalation (Windows Print Spooler)

Patch: Memory corruption (Safari WebKit)

Patch: Use-after-free in DOM (Firefox)

Patch: V8 type confusion (Chromium)

Patch: Typosquatting via namespace (PyPI)

Patch: Supply chain injection (npm registry)

Patch: Credential exposure (AWS CLI)

Patch: Provider credential leak (Terraform)

Patch: Arbitrary code execution (Python pip)

Patch: HTTP header injection (Node.js)

Patch: SpEL injection (Spring Framework)

Patch: JNDI injection variant (Apache Log4j)

Patch: Buffer overread (OpenSSL)

Patch: Use-after-free (Linux Kernel)

GiveWP – Donation Plugin and Fundraising Platform <= 3.19.3 - Unauthenticated PHP Object Injection

Patch: Container escape (Docker Engine)

Patch: HTTP request smuggling (Nginx)