Advanced Search

POC of CVE-2026-51031 for arbitrary local file read

One-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, ...

CVE-2023-22047 is a critical unauthenticated Local File Inclusion (LFI) vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit allows...

CVE-2026-9830 Proof of Concept

This is my simple implementation of an exploit for the PwnKit vulnerability.

An explanation and PoC to exploit CVE-2026-20896 Authentication Bypass Vulnerability on Gitea. Being able to steal session tokens for valid users in t...

PoC for CVE-2022-3218

PoC for CVE-2026-9090 — Casdoor SAML signature bypass (CWE-347). Reproduction-only; coordinated via CERT/CC VU#780781.

PoC for CVE-2025-64512: pdfminer.six CMapDB pickle deserialization RCE via crafted PDF

CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis ...

PoC for CVE-2026-56197 — Windows Admin Center (WAC) command injection RCE via invokeCommand; scripted no-browser auth (csrf/JWK/RSA-OAEP login chain),...

SambaCry Explanation and Exploitation Demo

S2-072（CVE-2026-73633）poc

CVE-2026-31816 — Budibase Authentication Bypass → RCE

This is an analysis for CVE-2025-32433 (Erlang OTP SSH Vulnerability). I did not write any of the code, I only wrote comments describing what the code...

PoC funcional de CVE-2026-52715 (GeoLeak): SQLi no autenticada en GEO my WordPress = 4.5.5 via swlatlng/nelatlng. Laboratorio Docker + exploit time-ba...

Proof of Concept (PoC) for CVE-2026-64638, a reflected XSS in WordPress Core 7.0.3.