Every new exploit,
on the radar.

CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution (RCE) through a buffer overflow exploit.

PoC for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA g…

Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE (CVE-2025-0282)

A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282, CVE-2023-46805, an…

# CVE-2025-0282: Remote Code Execution Vulnerability in [StorkS]

Exploit for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for Z…

Ivanti Connect Secure, Policy Secure & ZTA Gateways - CVE-2025-0282

Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.

PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)

A TryHackme room covering the CVE-2025-53779 exploitation using windows

Reproduction of cve-2025-53779-kerberos_bypass_reproduction

Reproduction of cve-2025-43564-tomcat_put_rce_reproduction

LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113

Hi, This is to check targets vulnerable for CVE-2024-49113 in bulk, faster.

FYP: Reproduced CVE-2024-49113 PoC on Windows Server 2019 (ref. SafeBreach); assessed Windows EDR detection gaps and produced ISO 27001-aligned remediation rep…

SafeBreaches CVE-2024-49113 POC(LdapNightmare) Integrated into Metasploit

Reproduction of cve-2024-49113-ldap_nightmare_reproduction

Reproduction of cve-2024-1708-connectwise_rce_reproduction

Proof-of-concept and technical write-up for CVE-2026-65971 — SQL injection via the sortDirection Livewire property in power-components/livewire-powergrid (< 6.…

Legacy HPE iMC vuln

CVE-2018-6574 POC : golang 'go get' remote command execution during source code build

CVE-2018-6574 for pentesterLAB

CVE-2018-6574: go get RCE solution for pentesterlab challenge

Exploit for remote command execution in Golang go get command.

CVE-2026-45250: FreeBSD 14.4 setcred kernel buffer overflow (LPE)

CVE-2026-66374: Knot Resolver 6.3.0 DNS-over-QUIC heap overflow (RCE)

Flowise Windows RCE exploit for CVE-2026-58057. Bypasses environment variable validation via case-sensitive flaw. Uses node_options to inject arbitrary code th…

PoC reproducer for CVE-2026-49099 (Apache Camel camel-salesforce): the non-Camel-prefixed sObjectQuery header escapes the HTTP header filter and overrides the …

Windows Network File System Crash PoC

POC Of CVE-2022-26937

A Zeek package to detect CVE-2022-26937, a vulnerability in the Network Lock Manager (NLM) protocol in Windows NFS server.

Reproducer for CVE-2026-48206: Apache Camel camel-jira IssueKey (and other non-Camel-prefixed) header injection driving arbitrary JIRA issue operations with th…

Detection script for CVE-2026-11374

PoC reproducer for CVE-2026-49365 (Apache Camel camel-netty-http / camel-undertow): muteException defaults to false, so an uncaught exception's full Java stack…

Podlove Podcast Publisher Unauthenticated File Upload RCE via is_image() vs extract_file_extension() Mismatch | CVSS 9.8

Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)

CVE-2024-21306 BadBlue implementation (Using DuckyScript)

PoC and test server

PoC reproducer for CVE-2026-53913 (Apache Camel camel-keycloak): KeycloakSecurityPolicy fails open in the Basic Setup — with no required roles/permissions the …

WSUS Unauthenticated RCE

Helps defenders find their WSUS configurations in the wake of CVE-2025-59287

Defensive PoC decoy for CVE-2025-59287 (WSUS) - emulates WSUS endpoints, captures request bodies and metadata, saves evidence for forensic analysis, and provid…

powershell version of hawktrace POC exploit

Working exploit (PoC) for CVE-2025-59287 — WSUS vulnerability. Featured on Vulners and DeepWiki.

Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317

Exploit script written in C# to aid gaining a reverse shell on targets with Windows Server Update Service(WSUS) CVE-2025-59287.

CVE-2025-59287 — Critical unauthenticated RCE in Windows Server Update Services (WSUS) via unsafe deserialization of an AuthorizationCookie, enabling SYSTEM-le…

Educational PoC for CVE‑2026‑21509 (Microsoft Office security feature bypass). Generates a harmless DOCX with dummy OLE artifacts to study EDR/AV visibility. N…

CVE-2026-21509

PowerShell script to check, apply, and test the Kill-Bit protection for the CVE-2026-21509 Microsoft Office zero-day vulnerability affecting Office 2016/2019/L…

New Physics Disclosure This repository contains a full weaponized exploit for **CVE-2026-21509**, targeting the Windows Network File System (NFSv4.1) kernel-mo…

CVE-2026-21509 is a critical bypass in the Microsoft Office OLE (Object Linking and Embedding) validation engine. While standard "laminar" exploits attempt to …

YARA rule and python script to detect potential exploits for the CVE-2026-21509 vulnerability in MS Office

Powershell script with Detection and Remediation for CVE-2026-21509

Microsoft just released emergency patches for CVE-2026-21509, a zero-day in the Office Suite that bypasses OLE/COM mitigations when a user simply opens a file.…

Proof of Concept for CVE-2026-0770 - Langflow Remote Code Execution

Langflow Remote Code Execution (RCE) Proof-of-Concept

CVE-2026-0770

LangFlow RCE | CVE-2026-0770 | Proof-Of-Concept

Langflow remote code execution exploit

CVE Reproduction: cve-2026-0770-langflow_rce_reproduction

Detection for CVE-2025-61882 & CVE-2025-61884

A critical pre-authentication Remote Code Execution (RCE) flaw in Oracle E-Business Suite (versions 12.2.3 - 12.2.14) allows attackers to gain full control ove…

Exploit for CVE-2025-61882 (do not use without any written permission).

Detects Oracle E-Business Suite (CVE-2025-61882). Detection: multi-tier checks — fingerprinting, version checks, endpoint & SSRF tests, timing analysis & contr…

POC of CVE-2025-61882