Advanced Search

🪬 CVE-2026-85706 – GitLab Unauth File Read Toolkit (CVSS 10.0) | Red/Blue Team suite for self-managed GitLab CE/EE 18.7–19.3.1. 2 tools: Full Exploit ...

UVdesk unauth wizard super-admin POC

exploit para reverse shell en MCPJamInspector v1.4.2 por endpoint mal configurado

PoC for CVE-2026-67401 — cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE. Includes a self-contained vulnerable lab, S...

Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled `fs_bsize` field.

Proof-of-Concept for CVE-2026-92680, the insecurely protected credentials vulnerability affecting Araxis Merge

container escape POCs for CVE-2026-80521 and CVE-2026-52910

A exploit to obtain RCE in CRAFTCMS

PoC: RCE in HuggingFace transformers via attn_implementation + kernels offline trust skip (CVE-2026-4372 bypass sibling)

Proof of Concept and Write-up for CVE-2026-56096 (Blind Parameter Injection in TYPO3 EXT:solr)

CVE-2026-12793 PoC — JetFormBuilder ≤3.6.2 unauth Register User / admin account creation

CVE-2021-29447 is an authenticated XML External Entity (XXE) vulnerability in WordPress

CVE-2026-22686-RemoteCodeExecution-RCE-PoC

Security research PoC for CVE-2026-49975: HTTP/2 HPACK compression bomb + flow-control hold DoS in Apache mod_http2

CVE-2014-0160 (Heartbleed) lab: vulnerable OpenSSL 1.0.1f in Docker, a memory-leak PoC, and a demo. Authorised lab use only.

🧰 CVE-2026-82329 – JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) | Red/Blue Team suite for self-hosted Artifactory 7.x (111-161). 2 tools: Full Exp...

PoC for CVE-2026-17633 — Authenticated RCE in IBM Langflow OSS 1.0.0–1.10.3 via custom_component endpoint. Includes CVE-2026-17632 AST scanner bypass ...

Exploit chain research targeting CVE-2026-43499 on Samsung Galaxy S21

Langflow 1.10.0 urllib SSRF POC