zotlit-PoC

ZotLit: security advisory CVE status: requested, pendin...

supernote-obsidian-plugin-PoC

Summary CVE status: requested, pending assignment. This...

terrapod-PoC

Terrapod: security advisory CVE status: requested, pend...

code-graph-rag-PoC

code-graph-rag: security advisory CVE status: requested...

obsidian-note-toolbar-PoC

Frontmatter-Driven Arbitrary Code Execution in Note Toolbar vi...

linux-entra-sso-PoC

Summary CVE status: requested, pending assignment. This...

crw-PoC

crw: security advisory CVE status: requested, pending a...

smb-ms17-010-pentest-report

SMB MS17-010 EternalBlue Penetration Test Report A lab-base...

meterpreter-exploit-reverse-shell-on-remote-vm

Meterpreter Reverse Shell Lab VM remota ⚠️ AVISO — SOLO...

CTF-Magic

CTF-Magic A GUI-based CTF exploitation framework for Debian...

BinaryExploitationJourney

No d...

SQLI

SQL Injection Exploitation Toolkit Complete Bug Bounty • Pe...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Struts2 Vulnerability Detection and Exploitation Tool s2tool...

Shenron

Shenron 日本語版 README Shenron is a passive Rus...

Defcon-Dreamcast-Planetweb-Research

PlanetWeb Dreamcast Browser v3.0 — Eden service-subscription R...

Exploit for Insufficiently Protected Credentials in Wazuh

Automated research artifact — not the upstream project...

...[ More ]

ILIAS versions prior to 9.22, versions 10.0 through 10.9, and versions 11.0 through 11.2 contain an unauthenticated PHP object injection vulnerability in the Shibboleth logout functionality. An unauthenticated attacker can manipulate stored session data that is subsequently deserialized without...

Tenda HG21 Hardcoded Root Credentials

Firmware analysis of the Tenda HG21 XPON fiber modem revealed a hardcoded administrative account baked into the shipped firmware image. The account is granted full root privileges UID 0 and its credentials are static across devices, meaning any attacker who can reach an exposed management service...

Metabase 0.61.0 - Authenticated Remote Code Execution

Exploit Title: Metabase 0.61.0 - Authenticated Remote Code Execution Date: 2026-08-12 Exploit Author: Gutierre0x80 Vendor Homepage: https://www.metabase.com/ Software Link: https://github.com/metabase/metabase Version: = 0.58.0 = 0.59.0 = 0.60.0 = 0.61.0 Example: python3 exploit.py...

PodcastGenerator 3.2.9 Cross Site Scripting

PodcastGenerator version 3.2.9 contains a persistent cross site scripting vulnerability in the Live Items functionality. Exploit Title: PodcastGenerator 3.2.9 - Stored XSS Date: 2026-08-08 Exploit Author: Sahil Arya Vendor Homepage: https://github.com/PodcastGenerator/PodcastGenerator Software...