Every new exploit,
on the radar.

Exploit for CVE-2023-41892

CVE-2023-41892 Reverse Shell

CVE-2023-41892 - Craft CMS Remote Code Execution (RCE)

A Craft CMS vulnerability that allows Remote Code Execution (RCE).

Customized this for my own use

Public advisory for CVE-2026-39253, addressing an insecure deserialisation in Pivotal CRM 6.6.04.08 allowing remote code execution via unsafe BinaryFormatter u…

Private fork of refile/refile (pinned at c4ac577c) with sinatra ceiling raised to < 4.0 for CVE-2022-45442. See sc-47428.

CVE-2026-46817

CVE-2026-46817 - Draft

A script for exploiting a vulnerability in PyTorch with subsequent RCE in library versions < 2.6.0

An automated, high-precision zero-shot evaluation pipeline for OpenAI's CLIP model on CIFAR-10. Features 88.80% accuracy, Safetensors security mitigation (CVE-…

CVE-2026-44789 — n8n <1.123.43 HTTP Request pagination prototype pollution to RCE (NODE_OPTIONS runner-spawn gadget). Lab + automated PoC, verified e2e.

CVE-2026-46490 — samlify <2.13.0 SAML AttributeValue XML injection -> signed-assertion privilege escalation. Self-contained PoC, verified e2e.

gRPC-Go RBAC Authorization Policy Bypass via Missing `:path` Slash (Auth Bypass)

CVE-2025-40271 Modifed By MadEploits

PoC for UniFi Network Application Pre-Auth Path Traversal (CVE-2026-22557)

CVE-2026-22557

Safely detect whether a UniFi Network Application controller is vulnerable to CVE-2026-22557

Detection content for CVE-2026-22557 — UniFi Network Application unauthenticated path traversal (CVSS 10.0). Includes YARA, Sigma, KQL, Splunk SPL, Sysmon conf…

CVE-2026-22557 Path Traversal Ubiquti UniFi Network Application

CVE-2026-22241 Exploit for GUnet Open eClass Unrestricted File Upload Leads to Remote Code Execution (RCE)

CVE-2026-22241

Lab Environment for CVE-2026-22241

CVE-2026-56782 — Gorse <0.5.10 unauthenticated DB dump/restore (admin_api_key fail-open). Lab + PoC, verified e2e.

jackson unserialize

Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover

PoC exploit for CVE-2026-10580 - Authentication Bypass in Hippoo Mobile App for WooCommerce <= 1.9.4 leading to Admin Account Takeover

CVE-2020-24750

This is a simple test for FasterXML jackson-databind

Path traversal in Ollama with rogue registry server

CVE-2024-45436

CVE-2024-37032 (Probllama) PoC for Ollama ≤0.1.33: path traversal and arbitrary file write via model digest handling, leading to automated privilege escalation.

CVE-2024-37032 scanner

This is a Linux Kernel Local Privilege Escalation PoC code for CVE-2026-52943 a use-after-free in skbuff.c, my first 0day found by me in linux kernel

Gigamon Unauth RCE (CVE-2026-36848)

Proof-of-concept exploit for CVE-2024-24824 demonstrating how an arbitrary class loading primitive can be transformed into remote code execution on vulnerable …

CVE-2025-0133 GlobalProtect XSS

Reflected XSS vulnerability found in Palo Alto GlobalProtect Gateway & Portal. Attackers can inject malicious scripts via crafted requests.

CVE-2025-0133 Scanner | Palo Alto GlobalProtect XSS Checker

Palo Alto - Global Protect - Reflected XSS

CVE-2025-0133 Exploit

Scope-aware bug bounty pipeline for CVE-2025-0133 (Palo Alto PAN-OS GlobalProtect reflected XSS). Shodan → H1/BC scope match → safe canary validation → report …

CVE-2026-41729 PoC