Every new exploit,
on the radar.

CVE-2026-57851

CVE-2026-7574

CVE-2025-67038 - Draft

NocoDB Shared-Base Links Could Invite Real Base Members and Survive Share Revocation

Windows Shell Spoofing Vulnerability

Vulnerability proof of concept reworked from https://github.com/utmost3/cve/issues/2 I take no credit for discovering the vulnerability. This is for educationa…

Proof of concept for CVE-2026-56111, an out-of-bounds write in the M421 G-code handler of Marlin Firmware

Proof of Concept (PoC) for the TP-Link DHCP Option 66 Unauthenticated RCE (CVE-2026-11834)

CVE-2020-8636 authenticated remote code execution exploit for Opmon

PoC and Dockerized vulnerable lab for CVE-2021-40822 (SSRF in GeoServer)

Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter | Unauthenticated Privilege Escalation via Weak Password Rese…

A reliable exploit + write-up to elevate privileges to root. (Tested on Ubuntu 22.04)

All Credit to MaherAzzouzi (https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit). This is a copy of the exploit for CTFs

Privilege escaltion exploit script for Boardlight machine on HackTheBox. I had access as the Larissa user and ran this script from the /tmp directory; script h…

Exploit created by nu11secur1ty (https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2022-37706)

CVE-2022-37706-Enlightenment v0.25.3 - Privilege escalation

PoC

ROOT TOOL

CVE-2020-13933 靶场： shiro 认证绕过漏洞

cve-2020-13933 apache shiro权限绕过漏洞

此项目为复现CVE-2020-13933 shiro漏洞所搭建的简易springboot+shiro项目

CVE-2026-45504 Microsoft Exchange File Read

GravCMS Unauthenticated Arbitrary YAML Write/Update leads to Code Execution (CVE-2021-21425)

working exploit for the old cve-2021-21425 grav cms 1.7.10 vuln

It is a nmap script for GravCMS vulnerability (CVE-2021-21425)

This exploit targets a vulnerability in DNN (formerly DotNetNuke) versions 6.0.0 to before 10.0.1 that allows attackers to disclose NTLM hashes through Unicode…

This is a Python-based exploit for CVE-2025-49493, which affects Akamai CloudTest versions before 60 2025.06.02 (12988). The vulnerability allows for XML Exter…

Critical Unauthenticated API Access in vBulletin

This repository contains a proof-of-concept exploit for CVE-2025-48827, a critical authentication bypass vulnerability affecting vBulletin 5.0.0–5.7.5 and 6.0.…

Vbullettin RCE - CVE-2025-48827

This repository contains the Proof of Concept (PoC) exploit script for CVE-2026-45156

Mutation testing on X.509 Certificate Validation IN OpenSSL v.1.1.1h, based on CVE-2021-3450.

CVE-2026-11837: local privilege escalation in the ansible.posix authorized_key module via symlink-following chown. Technical writeup; sibling of CVE-2024-9902.

CVE-2026-11837: local privilege escalation in the ansible.posix authorized_key module via symlink-following chown. Technical writeup; sibling of CVE-2024-9902.

Ethical, network-isolated Docker lab reproducing CVE-2026-26030 — Semantic Kernel in-memory vector store filter eval() RCE (patched in 1.39.4)

aaPanel WebSocket CSRF Bypass leading to RCE (Incomplete fix for CVE-2021-37840)