Every new exploit,
on the radar.

Simulated PoC for CVE-2025-2783 — a sandbox escape vulnerability in Chrome's Mojo IPC. Includes phishing delivery, memory fuzzing, IPC simulation, and logging.…

This project is a research-oriented and educational simulation designed to demonstrate the concept of a sandbox escape vulnerability within Google Chrome (ve…

Full-chain exploit for CVE-2025-2783 (Ipcz Sandbox Escape & RCE).

CVE Reproduction: cve-2025-2783-chrome_sandbox_escape_reproduction

CVE Reproduction: cve-2025-24472-fortinet_authbypass_reproduction

CVE Reproduction: cve-2024-50330-ivanti_epm_sqli_reproduction

WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler

CVE Reproduction: cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-43451 is a Windows NTLM vulnerability that allows an attacker to force authentication and capture NTLM hashes by using malicious shortcuts.

CVE Reproduction: cve-2024-43451-ntlm_hash_disclosure_reproduction

RDL的堆溢出导致的RCE

CVE-2024-38077: Remote Code Execution Vulnerability in Windows Remote Desktop Licensing Service

远程探测 remote desktop licensing 服务开放情况，用于 CVE-2024-38077 漏洞快速排查

检测RDL服务是否运行，快速排查受影响资产

CVE-2024-38077,仅支持扫描测试~

CVE-2024-38077，本仓库仅用作备份，

基于135端口检测目标是否存在CVE-2024-38077漏洞

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC

This PoC is targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474. This script automates the exploitation process, inclu…

Exploitation and Post-Exploitation Multitool for Palo Alto PAN-OS Systems affected by vulnerabilities CVE-2024-0012 and CVE-2024-9474

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC

Python script for CVE-2024-0012 / CVE-2024-9474 exploit

CVE-2024-0012批量检测脚本

PANW NGFW CVE-2024-0012

Privilege escalation using the XAML diagnostics API (CVE-2023-36003)

PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender.

A minimalist Local Privilege Escalation (LPE) vulnerability checker for CVE-2023-21817 (Windows Kerberos LPE) written in C++.

CVE-2026-16540 — Simply Schedule Appointments < 1.6.12.6 Unauthenticated Appointment Data Disclosure and Mass Deletion

Proof of Concept for the CVE-2026-22226

CVE-2026-46215 DRM GEM UAF Exploit for Linux 7.0 - The first working PoC for linux kernel 7 use after free- by Antonius (sw0rdm4n, w1sdom, ev1lut10n)

This is an exploit for CVE-2026-46215 (Linux Kernel Use After Free) Adapted for Linux 7.0 !!! by Antonius (ev1lut10n / sw0rdm4n)

PoC reproducer for CVE-2026-49098 (Apache Camel camel-kafka): the non-Camel-prefixed kafka.OVERRIDE_TOPIC header escapes the upstream HTTP header filter and ov…

ThorVG NULL pointer dereference via malformed SVG — AFL++ fuzzing writeup

PoC reproducer for CVE-2026-56139 (Apache Camel camel-undertow Rest DSL): the Rest DSL binding hard-codes muteException=false, so a configured muteException=tr…

PoC reproducer for CVE-2026-55994 (Apache Camel camel-iggy): the consumer copies an Iggy message's user-headers onto the Exchange unfiltered, so an injected Ca…

PoC reproducer for CVE-2026-55993 (Apache Camel camel-atmosphere-websocket): the WebSocket consumer copies connection query parameters onto the Exchange unfilt…

GameOver(lay) Ubuntu Privilege Escalation

GameoverlayFS (CVE-2023-2640 and CVE-2023-32629) exploit in Shell Script tested on Ubuntu 20.04 Kernel 5.4.0

CVE-2023-2640 CVE-2023-32629

Escalating Privilege using CVE-2023-2640 CVE-2023-3262

POC exploits demonstrating OverlayFS-based local privilege escalation vulnerabilities in Ubuntu (CVE-2023-2640 & CVE-2023-3262)

CVE-2026-50055 - Draft

CVE-2026-25632 — Fix Unsafe JSON Deserialization Leading to Remote Code Execution