Advanced Search

Unauthenticated account takeover PoC for TranslatePress Multilingual = 3.3.1 (WordPress)

cve-2026-19900-PoC

Non-intrusive detector for SonicWall SMA 1000 exposure to CVE-2026-83548/-83549 (version/patch-state check; no exploitation)

PoC for CVE-2026-31431

CVE-2026-63077 - Unauthenticated RCE exploit for JetBrains TeamCity via Agent Polling Deserialization. Supports mass scanning, multi-threading, and in...

CVE-2024-36057 — Authenticated OS Command Injection in Koha Library Software 22.05.22 (upload-cover-image.pl). Advisory + PoC by Hacklantic.

CVE-2024-36058 — Authenticated Time-Based Blind SQL Injection in Koha Library Software 22.05.22 (opac-sendbasket.pl). Advisory + PoC by Hacklantic.

CVE-2026-82329 Poc

CVE-2020-1938 (Ghostcat) Tomcat AJP file read/file include PoC with python3 port

CVE-2017-12617 Apache Tomcat JSP upload RCE PoC (original by cyberheartmi9, MIT)

CVE-2026-92162: Path traversal in the Flatpak system helper: an unvalidated arch parameter in DeployAppstream lets an active local user create root-ow...

Windows HTTP.sys integer overflow - nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM exploit; for authorized testing

CVE-2026-80428 PoC

🧰 CVE-2026-65643 – cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 tools: ...

Research lab and exploit chain for CVE-2026-75604: path traversal in the Next.js incremental cache, to RCE on Windows.

CVE‑2026‑82329 is a critical authentication bypass in JFrog Artifactory (CVSS 9.8) allowing unauthenticated attackers to obtain full administrative pr...

PoC for CVE-2026-4813