278087 matches found
aipoc
AIPOC – AI POC Thinking Framework Skill A framework designed...
Exploit for CVE-2026-64564
SCTPhantom — Linux kernel SCTP ASCONF use-after-free tracking...
Exploit for CVE-2020-23349
CVE-2020-23349 Android Lab Sina Weibo Android SDK 4.2.7의 Inte...
Exploit for Out-of-bounds Write in Mozilla Firefox
CVE-2024-29943, but with wasm Because chaining a real Pwn2O...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
CVE-2026-39987-Poc Proof o...
deepslop
DEEPSLOP — PS5 WebKit Exploit Kit 13.60 / WebKit RCE كيت اس...
Exploit for CVE-2026-53787
CVE-2026-53787 - Amasty Order Attributes Unauthenticated File...
ubi-stage6-exploit-chain
UBI Stage 6 — Exploit Chain Evidence marker: UBI-A6-AE2856E7...
📄 Sonatype Nexus Repository 3.94.1 Repository Format Authorization Bypass
A proof of concept exploit for an authorization bypass vulnerability in Sonatype Nexus Repository version 3.94.1. The vulnerability exists because the coreuiRepository.create method performs authorization against the caller-controlled repository format field while constructing the repository usin...
📄 TrueBooker 1.2.3 Unauthenticated Password Reset
A proof of concept exploit for an authentication bypass vulnerability in TrueBooker version 1.2.3. The vulnerability affects the WordPress TrueBooker Appointment Booking and Scheduler System plugin and allows an unauthenticated attacker to reset the password of an arbitrary user account. The...
...[ More ]
A proof of concept exploit for a time-of-check to time-of-use local privilege escalation vulnerability in libcap version 2.77. The vulnerability exists in capsetfile, which checks a supplied pathname with lstat before independently resolving the same pathname when calling setxattr. Because setxat...
OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution
!/usr/bin/env python3 Exploit Title: OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution CVE: CVE-2026-58138 Date: 2026-07-10 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity Author GitHub: https://github.com/mbanyamer Author Blog :...
...[ More ]
A proof of concept exploit for a server-side request forgery vulnerability in Gitea version 1.26.4. The vulnerability affects repository migration functionality and results from insufficient validation of pull request patch URLs. Although Gitea validates the original migration URL against its...
📄 WordPress 7.0.2 Code Execution / Cross Site Scripting
A proof of concept exploit for a reflected cross site scripting vulnerability in WordPress version 7.0.2. The vulnerability results from a parser differential between PHP striptags and WordPress KSES processing of usernames supplied to wp-login.php, allowing attacker-controlled markup to survive...
📄 DjangoCRM 2.4.0 Debug Information Disclosure
A proof of concept exploit for an information disclosure vulnerability in DjangoCRM version 2.4.0. The vulnerability exists because affected installations ship with Django debug mode enabled, allowing unauthenticated attackers to trigger technical error pages that disclose sensitive application...
CorgetGpsDget 2_3.2 - OS Command Injection
Exploit Title: CorgetGpsDget 23.2 - OS Command Injection Date: 2026-07-05 Exploit Author: Bytetobreach Fofa server: "PTTServer" Vendor Homepage: http://corget.com Version: GpsDget 23.2, build 2020-09-01 dget.version; product line Gps2.0 Tested on Ubuntu. Binary reversed on Ghidra Debian. Sink is ...
...[ More ]
A proof of concept exploit for an authorization bypass vulnerability in Traefik version 3.7.9. The vulnerability affects the Kubernetes Gateway API provider and results from ambiguous dynamic configuration object identifiers constructed by joining namespace and object names with hyphens. Differen...
Microsoft Edge 150.0.4078.48 - RCE
Exploit Title: Microsoft Edge 150.0.4078.48 - RCE CVE: CVE-2026-58289 Date: 2026-07-10 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity Author GitHub: https://github.com/mbanyamer Author Blog : https://banyamersecurity.com/blog/ Vendor Homepage:...
Joomla 2.9.99.4 - Unauthenticated Remote Code Execution
Exploit Title: Joomla 2.9.99.4 -Unauthenticated Remote Code Execution Date: 2026-07-10 Exploit Author: K3ysTr0K3R Jared Brits Vendor Homepage: https://www.joomla.org/ Software Link: https://extensions.joomla.org/extension/jce/ Version: JCE 1.0.0 through 2.9.99.4 fixed in 2.9.99.5 Tested on: Jooml...