Advanced Search

Proof of Concept (PoC) WebSocket client for CVE-2026-39987 (Marimo Pre-Auth RCE), intended for authorized security testing.

my poc for CVE-2026-53787

CVE-2026-69084/69085 — SiYuan arbitrary SQL execution via searchEmbedBlock + searchDocs SQLi (CVSS 9.9). Verified on v3.7.2, rejected on v3.7.3.

PoC for CVE-2025-3248: unauthenticated RCE in Langflow 1.3.0 via /api/v1/validate/code.

PoC for CVE-2025-59528 used to achieve remote code execution on the Silentium machine at HTB

CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)

POC 4 CVE-2026-15038

🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit

Windwos Zero Day Local PrivESc Exploit (CVE-2026-41091)

Exploiting the .lnk vulnerability and operating system handling mechanisms regarding explorer.exe and USB drives.

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

CVE-2026-19193 Proof of Concept

CVE-2026-19195 Proof of Concept

CVE-2026-64638 (XSS2shell) POC.

WordPress Pre-Auth RCE Exploit + Scanner + WAF Bypass | CVE-2026-63030 + CVE-2026-60137 | Go + Python + Metasploit modules + Docker lab

🛡️ CVE-2026-64638 - WordPress Security Assessment Suite (CVSS 8.9) | WordPress 4.7.0-7.0.2 pentest toolkit. Includes vulnerability assessment & ad...

PoC for CVE-2026-18953 — arbitrary file write (CWE-22) in awslabs.aws-transform-mcp-server's get_resource tool via the savePath parameter

CVE-2026-64638: WordPress Pre-auth XSS → RCE (XSS2Shell) PoC

CVE-2026-63077 — Unauthenticated Remote Code Execution in JetBrains TeamCity via agent polling protocol deserialization. CVSS 9.8 CRITICAL. Mass explo...