Every new exploit,
on the radar.

CVE-2026-65891 PoC — Joomla Content Editor file rename vulnerability (auth required, fixed in JCE 2.20.2)

A critical security vulnerability, identified as CVE-2023-50164 (CVE: 9.8) was found in Apache Struts, allowing attackers to manipulate file upload parameters …

Proof of Concept for Path Traversal in Apache Struts ("CVE-2023-50164")

Vulnerable docker container for Apache Struts 2 RCE CVE-2023-50164

A scanning utility and PoC for CVE-2023-50164

Vulnerable docker container for Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass CVE-2023-50164

CVE-2023-50164 (Apache Struts path traversal to RCE vulnerability) - Proof of Concept

A detailed walkthrough of Billing room exploiting CVE-2023-30258 and escalating via fail2ban misconfig

Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.

POC for CVE-2023-30258-RCE by n0o0b

Unauthenticated command injection vulnerability in Magnus Billing v7.3.0.

There are Exploit for Magnus Billing v7 system get root privilages

Stack-based buffer overflow in Sync Breeze Enterprise 10.0.28 reachable through the /login handler, demonstrating how unchecked input length can corrupt stack …

Study of a classic stack-based buffer overflow vulnerability in a controlled lab environment for educational purposes.

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login.

STACK BUFFER OVERFLOW EXPLOIT RESULTING IN REMOTE CODE EXECUTION

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login

CVE-2017-14980 python exploit

PoC toolkit for exploiting Cisco IMC RCE CVE-2026-20200

CVE-2026-19264 - Critical unauthenticated path traversal to full instance takeover in Postiz (< 2.22.1). Technical writeup: decode-order bypass, JWT_SECRET esc…

Educational Android lab for CVE-2023-31014 implicit intent hijacking

CVE-2026-20685 - Draft or TODO

Educational Android lab for CVE-2020-23349 in Sina Weibo SDK 4.2.7

Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user/get-role-list web interface.

Static reverse-engineering of a GIGABYTE H510M K V2 (`H510MKV2.F3`) BIOS image: full UEFI firmware-volume extraction analysis of the PI-spec SMM Core memory al…

WAC RCE - CVE-2026-26119 Windows Admin Center authenticated RCE via WinREST/PowerShell invokeCommand.

WAC RCE - CVE-2026-26119 Windows Admin Center authenticated RCE via WinREST/PowerShell invokeCommand.

Froala Persistent XSS

POC 4 CVE-2026-15038

Pre-launch security checklist for AI-generated apps (Lovable, v0, Bolt, Cursor). 69 checks covering Supabase RLS, exposed keys, and prompt injection. Same patt…

Senior-CSO security audit skill for vibe-coded apps. 22-check audit anchored to real 2026 incidents (Moltbook, Lovable CVE-2025-48757). Drop-in Claude Code ski…

Non-intrusive version-based vulnerability scanner for CVE-2026-4282 (Keycloak SingleUseObjectProvider isolation flaw enabling authorization code forgery & priv…

CVE-2023-32233: Linux内核中的安全漏洞

Use-After-Free in Netfilter nf_tables when processing batch requests CVE-2023-32233

自用，poc作者为Piotr Krysiuk，在使用前请先阅读README.md

Gemini 2.5 Pro nf_tables Red Teaming Case Study (CVE-2023-32233) — LLM Safety Alignment & Responsible Disclosure

CVE-2023-32233

A technical case study and timeline dataset documenting Google Gemini 2.5 Pro's safety alignment policies, guardrails, and refusal behavior evolution regarding…

A Linux-related vulnerability

Support x86 and x64

this tool can generate a exp for cve-2017-8486, it is developed by python

Exploit vulnerabilities and vulnerability prevention implementation

Usbhijacking | CVE-2017-8464

- using python to detect cve-2017-8464 vulnerbilities