Every new exploit,
on the radar.

CVE-2026-20896 Gitea Docker X-WEBAUTH-USER auth bypass checker

Public PoC and detector for CVE-2026-20896 ("Gitea Docker: One Header, Any User")

this is a modified POC of rz1027 for CVE-2026-20896

Gitea Docker Image Authentication Bypass

An explanation and PoC to exploit CVE-2026-20896 Authentication Bypass Vulnerability on Gitea. Being able to steal session tokens for valid users in the Gitea …

CVE 1-day in afd.sys

One missing function call on the route registration was enough to turn the MCP interface into an unauthenticated RCE gateway.

Non-destructive vulnerability scanner for Nginx-UI MCP Endpoint Authentication Bypass (CVE-2026-33032)

Docker Compose setup to demonstrate the nginx-ui missing authentication vulnerability

A real exploit for BitBucket RCE CVE-2022-36804

Multithreaded exploit script for CVE-2022-36804 affecting BitBucket versions <8.3.1

Somewhat Reliable PoC Exploit for CVE-2022-36804 (BitBucket Critical Command Injection)

A loader for bitbucket 2022 rce (cve-2022-36804)

A critical command injection vulnerability was found in multiple API endpoints of the Atlassian Bit bucket Server and Data center. This vulnerability affects a…

Bitbucket CVE-2022-36804 unauthenticated remote command execution

A simple PoC for Atlassian Bitbucket RCE [CVE-2022-36804]

Atlassian Bitbucket Server and Data Center - Command Injection Vulnerability (CVE-2022-36804)

Proof of Concept (PoC) for the TP-Link Omada SSL VPN Unauthenticated RCE (CVE-2026-19586)

PoC exploit chain for CVE-2026-2796: SpiderMonkey WebAssembly sandbox escape (signature type confusion -> arbitrary R/W -> RCE)

Full Firefox chain: CVE-2026-2796 wasm type confusion -> content-process RCE, plus CVE-2026-2768 parent-process escape analysis (both fixed in Firefox 148)

CVE-2026-9830 Proof of Concept

The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of it…

Proof-of-concept for CVE-2026-18315 (TrueBooker WordPress Plugin): Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover

POC tool for ResetNightmare (CVE-2026-27912)

CVE-2026-27912 (ResetNightmare) — Linux/impacket port of Semperis Community's Invoke-ResetNightmare PoC

PoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security research only.

A in-the-wild V8 type confusion bug.

Linux Binder binder_free_transaction() process-lifetime use-after-free (CVE-2026-64468): unprivileged PoC + x86_64 LPE. Authorised security research.

PoC exploit for CVE-2025-68999 - Second-Order SQL Injection in Happy Addons for Elementor <= 3.20.4

PoC exploit for CVE-2025-68999 - Second-Order SQL Injection in Happy Addons for Elementor <= 3.20.4

Self-Defeating Audits: reproducible lab showing a low-privilege PostgreSQL role reversibly blinding a trigger-based auditor + poisoning attribution (PG14/16), …

Wolf CMS <= 0.8.3.1 - RCE via Arbitrary File Write

CVE-2026-8181 - Burst Statistics 3.4.0-3.4.1.1 Unauthenticated Authentication Bypass to Admin Account Takeover | Proof of Concept

CVE-2026-8181 PoC: Burst Statistics (3.4.0–3.4.1.1) authentication bypass. Python tool — single & multi-target scans, threaded workers, TXT reports. Authorized…

Exploit for the CVE-2026-8181 - Burst Statistics WordPress Plugin Authentication Bypass

CVE-2026-8181 | Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover

CVE-2026-8181: Burst Statistics Auth Bypass → REST API takeover & admin creation. Python 2.7. Educational use only.

This vulnerability allows unauthenticated attackers who know a valid administrator username to impersonate that admin during REST API requests by using any inc…

The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass

CVE-2026-47858

halo cms plugin 1-request rce from a url, PoC + exploit chain

CVE-2026-19500 poc

CVE-2026-19501 poc

VsockDrop (CVE-2026-53365) Linux kernel io_uring zerocopy vsock LPE exploit mirror — MaherAzzouzi, MIT; for authorized security testing

CVE-2026-53365

Working implementation: cryptographically verified short-lived identities for AI decision authentication — CVE-2025-59536 (Patent Pending US 64/006,746)

Professional PoC for CVE-2025-59536 and related CVEs. Demonstrates an MCP Tool Confirmation Prompt Misrepresentation in Anthropic Claude_Code leading to arbitr…

Scan a repo for AI-IDE config files that can trigger RCE via Claude Code hooks, Cursor rules, MCP auto-registration. Detects CVE-2025-59536, CVE-2026-21852, CV…

Read-only safety scanner for Claude Code projects. Catches CVE-2025-59536, statusLine injection, prompt injection, and more.

Scan a repo's .claude/ config (settings.json hooks, MCP servers, env, allowed-tools) for the RCE & API-key-exfiltration footguns (CVE-2025-59536, CVE-2026-2185…