Advanced Search

Exploit for pgAdmin4 Remote Code Execution (RCE) vulnerability affecting versions 8.10 to 9.1.

CVE-2026-65891 PoC — Joomla Content Editor file rename vulnerability (auth required, fixed in JCE 2.20.2)

CVE-2026-64824 — Home Assistant backup-restore symlink path traversal → root RCE. First working PoC, verified on real HA 2026.5.4 (sitecustomize.py ov...

The poc of CVE-2025-59528

my poc for CVE-2026-53787

Sliver HTTP(S) C2 PNG bomb DoS exploit — GHSA-663m-7x7m-g4fw (CVE-2026-77622)

CVE-2026-69084/69085 — SiYuan arbitrary SQL execution via searchEmbedBlock + searchDocs SQLi (CVSS 9.9). Verified on v3.7.2, rejected on v3.7.3.

WP2Shell is a powerful and modular exploit framework that combines two critical WordPress vulnerabilities (CVE-2026-63030 and CVE-2026-60137) to achie...

XSS2Shell ULTIMATE v3.0 is a powerful exploitation tool that chains Cross-Site Scripting (XSS) vulnerabilities in WordPress to achieve Remote Code Exe...

PoC for CVE-2025-3248: unauthenticated RCE in Langflow 1.3.0 via /api/v1/validate/code.

CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)

POC 4 CVE-2026-15038

Windwos Zero Day Local PrivESc Exploit (CVE-2026-41091)

Exploiting the .lnk vulnerability and operating system handling mechanisms regarding explorer.exe and USB drives.

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

CVE-2026-19193 Proof of Concept

CVE-2026-19195 Proof of Concept

CVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)