CVE-2026-63072

🔐 CVE-2026-63072 — OpenSSL CMS Heap Buffer Overflow A technical analysis ofCVE-2026-63072 , a heap-based out-of-bounds write affecting OpenSSL's CMS key-unwrapping functionality. 📌 Overview CVE-2026-63072 is a heap-based buffer overflow vulnerability in OpenSSL's CMS Cryptographic Message Syntax...

CVE-2026-115801

A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the component JSON Config File Handler. The manipulation of the argument hiddendim/classnum results in out-of-bounds read...

wp2shell-lab

wp2shell lab & detector + pre-auth RCE PoC A self-contained lab, non-destructive detector , and full pre-auth RCE proof-of-concept for wp2shell — the pre-authentication vulnerability chain in WordPress core: CVE| Component| Class| CVSS ---|---|---|--- CVE-2026-60137| WPQuery::authornotin| SQL...

EUVD-2026-102249

undici vulnerable to Denial of Service via unbounded memory in the EventSource parser...

CVE-2024-27821

CVE-2024-27821 Writeup and PoC of CVE-2024-27821, for education purposes. Writeup: https://snoolie.gay/blog/CVE-2024-27821...

POC_Metabase_CVE-2023-38646

For educational purposes only Inspired by Assetnote research CVE: CVE-2023-38646 CVSS: 9.8 Vendor link: click Vulnerable version Metabase Enterprise 1.46 Only tested on ParrotOS Result...

tactical-exploitation

tactical-exploitation "The Other Way to Pen-Test" -- HD Moore & Valsmith I've always been a big proponent of a tactical approach to penetration testing that does not focus on exploiting known software vulnerabilities, but relies on old school techniques such as information gathering and brute...

CVE-2022-22947-goby

CVE-2022-22947-goby Regularly updated some casually written goby POCs, including high-risk EXP. goby CVE202222947.json...

awesome-censys-queries

Awesome Censys Queries A collection of fascinating and bizarre Censys Search queries. Contributing Found an awesome query? Submit it here Interested in contributing in another way? See the contributing guidelines Resources Censys Search CensysGPT Beta - AI Generated Queries Legacy Search Queries ...

icicle

MSP430 crash analysis Crashes found in MSP430 binaries by Icicle. | Target| Description ---|---|--- I03| Goodwatch| Incorrect comparison when writing to dmesgbuffer I04| Goodwatch| Zero message length I05| Goodwatch| RNG Overflow I06| Goodwatch| Out-of-bounds access in OOK keypress I07| Goodwatch...

CVE-2025-5777

CVE-2025-5777 — Citrix NetScaler "CitrixBleed 2" Memory Disclosure Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. The sequel to the original CitrixBleed: an out-of-bounds read on NetScaler ADC/Gateway authentication endpoints that...

EUVD-2026-108188

multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown...

cve-2020-0022

cve-2020-0022 poc for cve-2020-0022 usage gcc poc.c -lbluetooth -o poc poc MACADDR info This poc should be stable on android 8.1.0,once it run into truncating packet, crash. But it cloud be very unstable, on Samsung s9 plus surely unstable. Run poc on raspberry pi 3B has been tested okay. run...

CVE-2023-21768-dotnet

CVE-2023-21768 - Dotnet Dotnet / c port of AFD-for-WinSock-EoP exploit References: https://github.com/zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit https://github.com/chompie1337/WindowsLPEAFDCVE-2023-21768 Why? Sometimes you can't use compiled binaries. How to? Run the following in...

CVE-2026-59827

Authorized Metabase CVE-2026-59827 Penetration Testing Tool An authorized security assessment utility for validating the presence of CVE-2026-59827 in Metabase deployments during approved penetration testing engagements. This tool is designed to demonstrate the existence of the vulnerability whil...

CopyFile_CVE-2026-31431

CopyFileCVE-2026-31431 Copy Fail CVE-2026-31431 – Local Privilege Escalation Exploit A logic bug in the Linux kernel’s authencesn AEAD template allows an unprivileged user to write 4 controlled bytes into the page cache of any readable file. The provided Python script corrupts /usr/bin/su in memo...

CVE-2023-27997-POC

Usage: python3 cve-2022-42475.py rhost rport lhost lport Exemple: python3 exploit.py 192.168.106.142 10443 192.168.106.143 9999 Disclaimer: This project is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal...

GHSA-9PVW-HWFG-92H5 Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type

Summary Wasmtime may panic when the host lowers a component model stream or future into a guest, if the host created that stream or future with one payload type and the guest expects a different one. This can happen when an embedder creates a stream or future, passes it through a guest, receives ...

CVE-2025

CVE-2025 CVEs discovered in 2025 and their PoCs...

UniBLEed

UniBLEed Unitree G1 RCE PoC & Scripts CVE-2026-76639 / CVE-2026-76640 technical details at boschko.ca/g1-ble-rce/ Use this repository only with robots, accounts, and networks you are authorized to test. The active chains can change the robot's WiFi configuration, stop or restart services, crash...