Advanced Search

CVE-2026-39987 — Marimo Pre-Authentication RCE

Oracle OID LDAP Server Privileges Management Exploit

Proof of Concept for CVE-2026-19598 affecting Pods = 3.3.9.

CVE-2026-64849 PoC

CVE-2026-15748 - Unauthenticated RCE exploit for WordPress Forminator plugin (≤1.56.1). Automated detection, deep crawl, nonce extraction, and safe up...

CVE-2026-14669 - PostgreSQL to_char() timezone abbreviation heap buffer overflow PoC; for authorized security testing

PoC for CVE-2026-44848: Portainer missing authorization on Docker plugin endpoints - host RCE (GHSA-rrmm-9v76-h3p4). Stdlib-only Python.

PoC for a Path Traversal vulnerability in Whistle v2.9.98 via the /cgi-bin/sessions/get-temp-file endpoint. (Unpatched)

CVE-2026-62737 ExecutionContext.sys arbitrary kernel-call PoC

PoC for CVE-2025-62593: unauthenticated RCE in Ray (CISA KEV). Stdlib-only Python.

CVE-2026-19501 poc

CVE-2026-19500 poc

Technical analysis and clean Java Thread Echo PoC for Oracle WebLogic Server vulnerability chain.

CVE-2026-44578 PoC

CVE-2026-19478 PoC . Unauthenticated remote code-injection in GitLab's GraphQL layer

Kernel root exploit (CVE-2026-43499) for some 5.X devices (mostly Amazon)