Every new exploit,
on the radar.

Apache Syncope: User self-service privilege escalation

Security research and proof-of-concept for CVE-2026-0776 affecting Discord Desktop Client.

PoC for CVE-2026-12191

PoC tool for CVE-2026-44680 affecting MikroORM ≤7.0.13. Exploits JSON path injection to extract database contents via UNION-based attacks. Features vulnerabili…

Windows LPE

A firebeam plugin that exploits the CVE-2024-26229 vulnerability to perform elevation of privilege from a unprivileged user

BOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel

Windows CSC服务特权提升漏洞。 当程序向缓冲区写入的数据超出其处理能力时，就会发生基于堆的缓冲区溢出，从而导致多余的数据溢出到相邻的内存区域。这种溢出会损坏内存，并可能使攻击者能够执行任意代码或未经授权访问系统。本质上，攻击者可以编写触发溢出的恶意代码或输入，从而控制受影响的系统、执行任意命令、安装恶意软…

CWE-781: Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code

Nim touch up of CVE 2024 26229

Windows LPE

Mass CVE-2026-23550 Exploit

authorized CYBERDUDEBIVASH ECOSYSTEM tool for detecting CVE-2026-23550 in WordPress Modular DS plugin

CVE-2026-23550 - Modular DS WordPress Plugin **Unauthenticated Admin Access**

🔴 EpSiLoNPoInT - CVE-2026-23550 Modular DS Zero-Click **Framework d'exploitation Modular DS Admin Bypass** ## 🎯 CVE Ciblée Principale **CVE-2026-23550** : Mo…

PoC reproducer for CVE-2026-49097 (Apache Camel camel-irc): the non-Camel-prefixed irc.sendTo header escapes the HTTP header filter and overrides the producer'…

PoC reproducer for CVE-2026-49086 (Apache Camel camel-dapr): the pub/sub consumer copies the untrusted CloudEvent's pubsubName/topic into producer-routing head…

CVE-2026-60121, CVE-2026-61498 - Draft

CVE PoC

Fix WinVerifyTrust Signature Validation Vulnerability, CVE-2013-3900, QID-378332

Powershell script that checks for cert padding in the Windows Registry and adds it if it does not exist. Meant to resolve the WinTrustVerify Vulnerability.

Remediation for CVE-2013-3900

WinVerifyTrust Signature Validation CVE-2013-3900 Mitigation (EnableCertPaddingCheck)

Security vulnerability research writeups. CVE-2026-50402: Windows NTFS Elevation of Privilege (CVSS 7.8)

The value of the produk request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. The payload xbnw0"…

Reverse engineering research and custom firmware for the Allwinner V3-based SJCAM SJ4000 Air, including firmware parsers, an AVIOCTRL client, security rese…

PoC for CVE-2026-46420, command injection in shivammathur/setup-php via repository-controlled PHP version resolution.

Pre-auth arbitrary file upload RCE exploit for iCagenda Joomla extension < 4.0.8 (CVSS 10.0)

iCagenda Unauthenticated File Upload to RCE

iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

Unauthenticated Remote Code Execution in Astroid Framework 2.0.0 - 3.3.10 for Joomla

Hands-on vulnerability management case study: how Wazuh flagged a real SSRF (CVE-2025-68616) in WeasyPrint, and how I reproduced and patched it.

My CVE in Oracle FLEXCUBE Universal Banking

Advisory for CVE-2026-51385. Needed to publish it as GRAPHIFY hasnt recognized the advisory neither publish it, and MITRE assigned CVE-2026-51385, this is the …

Use CVE-2026-43074 to disable SELinux on Android (Linux 6.6/6.12)