Every new exploit,
on the radar.

WP Full Stripe Free <= 8.4.3 - Missing Authorization

Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)

Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)

CVE-2022-41678: Dangerous MBeans Accessible via Jolokia API in Apache ActiveMQ

CVE-2022-41678 是 Apache ActiveMQ 中的一个远程代码执行漏洞。该漏洞允许攻击者通过 JMX (Java Management Extensions) 接口修改 Log4j 配置或 JFR (Java Flight Recorder) 配置，从而写入恶意的 JSP webshell 到服务…

Out-of-bounds array read in LibRaw

CVE-2026-20251 — Splunk Secure Gateway jsonpickle deserialization RCE (CVSS 8.8) | ReactiveZero Security Research

CVE-2026-12415-or-CVE-2026-12416.py

Pre-authentication LFI Lead to RCE

Cacti <= 1.2.30

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

Scanner for CVE-2020-0796 - SMBv3 RCE

CVE-2020-0796 Remote Code Execution POC

SMBGhost (CVE-2020-0796) Automate Exploitation and Detection

PoC for triggering buffer overflow via CVE-2020-0796

CVE-2020-0796 Local Privilege Escalation POC

Cobalt Strike AggressorScripts CVE-2020-0796

PoC for CVE-2026-8023: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Plane’s V2 asset subsystem trusted workspace slugs and asset UUIDs without enforcing the right membership checks, which let one authenticated user read, copy, …

Penpot's remote image import let an authenticated file editor turn a normal media convenience feature into backend-origin SSRF because attacker-controlled URLs…

A local package installation helper trusted caller-supplied package names too much. In yeoman-environment, missing generators could be installed without user c…

The SSRF filter checked hostname text, but the actual destination was decided later by DNS. That gap let attacker-controlled Webhook URLs reach loopback, metad…

A low-privileged Docmost user could supply a victim attachmentId to the generic upload endpoint and overwrite another page's stored attachment inside the same …

Docmost accepted a javascript: URL inside an attachment node, preserved it through storage and rendering, and turned it back into a clickable anchor in the Doc…

A public share looked clean in the page tree, but the search endpoint told a different story. In Docmost, restricted child pages hidden from public share viewe…

CVE-2026-54807 WooCommerce Privilege Escalation ║ ║ Unauthenticated Admin Role Assignment via Reg. Form

CVE-2026-24207 — NVIDIA Triton SageMaker auth bypass to unauth RCE. Detection script, bypass demo, RCE-chain PoC, and IDS rules.

CVE-2026-55584 — phpSysInfo IP Allowlist Bypass

Detection & remediation toolkit for the Miasma / Shai-Hulud worm and CVE-2026-35603 (AI-agent/IDE config injection)

Non-destructive vulnerability scanner for NGINX HTTP/3 (ngx_http_v3_module). It ONLY performs a safe probe: opens an HTTP/3 (QUIC) connection, sends a single H…

Simple Python PoC to check Citrix NetScaler ADC/Gateway for CVE-2025-12101 reflected XSS on /cgi/logout using a crafted SAMLResponse + RelayState payload

CVE-2026-20230 - Cisco Unified CM

Cisco Unified Communications Manager (Unified CM) deployments affected by CVE-2026-20230.