Every new exploit,
on the radar.

Code for veracode blog

SnakeYAML-CVE-2022-1471-POC

SnakeYAML CVE-2022-1471 exploit payload for demo

attacker

Sentinel demo: transitive snakeyaml CVE-2022-1471 via Spring Boot + exploitable code pattern

SnakeYAML CVE-2022-1471 exploit payload for Seal Security demos

CVE-2019-1040 with Exchange

an impacket-dependent script exploiting CVE-2019-1040

CVE-2019-1040 with Kerberos delegation

Updated version for the tool UltraRealy with support of the CVE-2019-1040 exploit

The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.

Pure Nim implementation for exploiting CVE-2021-36934, the SeriousSAM local privilege escalation

PoC for CVE-2021-36934, which enables a standard user to be able to retrieve the SAM, Security, and Software Registry hives in Windows 10 version 1809 or newer

Fix for the CVE-2021-36934

HiveNightmare a.k.a. SeriousSam Local Privilege Escalation in Windows – CVE-2021-36934

Small and dirty PoC for CVE-2021-36934

PoC for CVE-2021-36934 Aka HiveNightmare/SeriousSAM written in python3

HiveNightmare aka SeriousSAM

Detection and Mitigation script for CVE-2021-36934 (HiveNightmare aka. SeriousSam)

Defensive analysis of CVE-2009-4496 in Boa 0.94.14rc21, including source-code review, patch analysis, severity assessment, and ethical scope.

PoC funcional de CVE-2026-52715 (GeoLeak): SQLi no autenticada en GEO my WordPress <= 4.5.5 via swlatlng/nelatlng. Laboratorio Docker + exploit time-based/bool…

CVE-2026-54433 Roundcube plain-text email stored XSS PoC

解决网络安全漏洞

CVE-2026-72550 — Friendica Unauthenticated Stacked-Query SQL Injection PoC (CVSS 9.8 Critical)

Original research and PoC for an unauthenticated firmware update vulnerability with missing cryptographic firmware authentication in Netis NC63

Original PoC for CVE-2023-32784

KeePass 2.X dumper (CVE-2023-32784)

This script complements the results obtained through the keepass-password-dumper tool when exploiting the CVE-2023-32784 vulnerability affecting KeePass.

KeePass Master Password Extraction PoC for Linux

Re-write of original KeePass 2.X Master Password Dumper (CVE-2023-32784) POC in python.

Retrieve the master password of a keepass database <= 2.53.1

year 2 semester 1 Systems and Network Programming Assignment

Find the vulnerability your tests were never written to catch. A ReGrade demo modeling CVE-2023-5968: catch a password-hash leak by comparing an app to itself.

From a bare PCB to root: hardware-hacking a ZyXEL P-870HN (BCM6368) over UART — CVE-2025-0890 + CVE-2024-40891, on my own hardware.

From a bare PCB to root: hardware-hacking a ZyXEL P-870HN (BCM6368) over UART — CVE-2025-0890 + CVE-2024-40891, on my own hardware.

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service

CVE-2026-56292 - AcyMailing for Joomla unauthenticated SQL injection scanner

Notepad++ CVE-2026-52886 — session.xml backupFilePath starts_with() path traversal (GHSA-rqfm-pw34-r7j6)

This tool generates BIP-39 mnemonic phrases derived from Unix timestamps, exploring the 'Milk Sad' vulnerability's implications (CVE-2023-39910)

RAMnesia Attack: A Scientific Investigation of WireTap Threats to Bitcoin Infrastructure, Hardware Vulnerabilities (CVE-2025-6202, CVE-2023-39910), and Cryptan…

Educational study of Bitcoin key entropy: weak-RNG wallet enumeration (Milk Sad / CVE-2023-39910 class) vs. the infeasibility of brute-forcing a good key.

CVE-2026-4020 - Draft