Advanced Search

CVE-2026-64560 posix-cpu-timers UAF exploit for Vivo devices

CVE-2026-0013 Android EoP PoC - Compiled artifacts for security research (Derivative of inforcqb/cve-2026-0013-exploit)

Exploiting the vsftpd 2.3.4 backdoor (CVE-2011-2523) on Metasploitable2 — a hands-on pentesting lab writeup covering recon, exploitation, and remediat...

Honor 80 GT (MagicOS 8.0.0.128, kernel 5.10.168) privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading

PoC for CVE-2026-75616, an authenticated OS command injection in TP-Link Archer C20 v6 firmware

Hands-on reproduction of CVE-2024-28000 in LiteSpeed Cache using an isolated WordPress lab. Includes reconnaissance, vulnerable hash recovery, Adminis...

Investigation and Incident Response report for LetsDefend Alert SOC335 (CVE-2024-49138 Exploitation)

Metasploit-based penetration test on an isolated Metasploitable2 lab VM — remote exploitation via DistCC (CVE-2004-2687), privilege escalation via ude...

CVE-2026-9198 - IBM Langflow OSS Unauthenticated Remote Code Execution (RCE)

Exploit Title: Unauthenticated SQL Injection on CMS Made Simple = 2.2.9

CVE-2026-34910 - CVE-2026-34909 Unifi OS

CVE-2020-13671 - Drupal RCE via File Upload Vulnerability Analysis and PoC

CVE-2020-13671 - Drupal RCE via File Upload Vulnerability Analysis and PoC

Educational proof-of-concept automation for CVE-2022-22963, demonstrated in an authorized Hack The Box lab environment.

POC pre-auth RCE on Exchange

JCEzploit is a powerful, fully-automated RCE exploit for Joomla JCE (CVE-2026-48907) featuring interactive shell, batch command execution, file downlo...

Read-only PoC for CVE-2026-65400 — macOS Screen Sharing (screensharingd) pre-auth SRP bypass giving root file read. Patched in macOS 26.6.1 / 15.7.9 /...

PoC for J2Store CVE-2026-67358–67362 (J2Commerce security advisory Aug 2026)

PoC for CVE-2026-58455: Dockwatch =0.6.567 unauthenticated RCE. Stdlib-only Python.