Advanced Search

CVE-2026-78006 + CVE-2026-78159 Mass Exploit

CVE-2026-28695 PoC - Authenticated blind remote code execution in Craft CMS.

Authenticated Craft CMS RCE PoC for CVE-2026-44011

CVE-2026-88008 - Traefik (=2.11.56 / =3.7.12): a client-controlled h2c upgrade tunnels past routers and middleware (BasicAuth/ForwardAuth/IPAllowList)...

Lab demonstrating that CVE-2025-56005 is real and does allow arbitrary code execution at a minimum (the debate about RCE notwithstanding here), and sh...

CVE-2026-71963 - Hermes Agent 0.18.2-0.21.0 RCE via a repository-delivered .git/config (core.fsmonitor). Stdlib-only Python, verified on real 0.21.0 w...

Exploit para explotar la vulnerabilidad CVE-2026-87902 que se acontece en el core de WordPress

CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints Gateway, build vs 14.1-73.37 / 13.1-64.23, UDP...

CVE-2026-44011-craft-rce-poc

CVE-2026-34990 minimal PoC. CUPS = 2.4.16 local privesc.

CVE-2026-43805 IOKit IODMACommand race analysis and proof of concept

CVE-2024-4367 proof PDF for cpc docs-preview

Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route con...

🛡️ CVE-2026-67279 + CVE-2026-86060 – MikroTrick MikroTik RouterOS SSH Pre-Auth Takeover (CVSS 9.2) | Red/Blue Team suite. 2 tools: Full Exploit (rekey...

CVE-2026-100835 PoC: Edgeless Contrast 1.16.0 remote attestation relay (aTLS / CWE-295). Manifest audit (AllowedChipIDs/AllowedPIIDs), version & c...

CVE-2026-48842 PoC — Roundcube virtuser_query pre-auth SQLi

The PoC of CVE-2026-44011: Craft CMS, from 4.0.0 to before 4.17.12 and 5.9.18, contains an input-handling flaw in a Yii object creation path that let ...

CVE-2026-100740 PoC: D-Link DIR-895L A1_102b07 L2TP Host Name AVP out-of-bounds write in tunnel_set_params (UDP 1701). Device fingerprint + optional O...

PoC for MLFlow unauth RCE

MikroTrick (MikroTik RouterOS SSH takeover chain) PoC mirror - CVE-2026-67279 + CVE-2026-86060 (+67276); for authorized lab testing