Advanced Search

Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless ...

A fully automated exploit script for **CVE-2025-69212**, a command injection vulnerability in OpenSTAManager. This script authenticates with admin cre...

CVE-2026-39113: SQLite SQLAR heap-buffer-overflow advisory and reproducer

Hunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak database

PoC exploit for CVE-2025-68999 - Second-Order SQL Injection in Happy Addons for Elementor = 3.20.4

Exploit for KeyCloak CVE-2026-18963

CVE-2026-19478: GitLab GraphQL Vulnerability PoC

This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell.

CVE-2026-18366: Events Manager 7.4.1 — Unauthenticated Privilege Escalation to Administrator. Write-up and proof-of-concept (poc.py).

Proof-of-concept for CVE-2026-18315 (TrueBooker WordPress Plugin): Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeove...

PoC exploit chain for CVE-2026-2796: SpiderMonkey WebAssembly sandbox escape (signature type confusion - arbitrary R/W - RCE)

Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell

halo cms plugin 1-request rce from a url, PoC + exploit chain

VsockDrop (CVE-2026-53365) Linux kernel io_uring zerocopy vsock LPE exploit mirror — MaherAzzouzi, MIT; for authorized security testing

Original research and non-destructive PoC for a pre-auth Base64-decoded password stack buffer overflow in Netis NC63 login.cgi

Original research and non-destructive PoC for a pre-auth stack buffer overflow via unbounded sscanf scanset in the Netis NC63 ipFilterList handler

CVE-2026-39987 — Marimo Pre-Authentication RCE