Exploit for Path Traversal in Publiccms

--- CVE-2026-1111 – Smart Contract Cross‑Function Reentrancy...

Exploit for Cross-site Scripting in Fabian Online_Reviewer_System

--- CVE-2026-2222 – MQTT Broker CONNECT Packet Heap Overflow...

Exploit for Stack-based Buffer Overflow in Google Chrome

--- CVE-2026-4444 – JWT Algorithm Confusion via kid Injectio...

CVE-Poc_All_in_One

CVE Poc All in One 🛡️ This is a tool for searching, filtering...

Exploit for External Control of Assumed-Immutable Web Parameter in Google Chrome

--- 10. CVE-2026-9998 – Insecure Deserialization in Blockcha...

Exploit for CVE-2026-6789

--- 9. CVE-2026-6789 – Stack Buffer Overflow in Embedded TLS...

Exploit for CVE-2026-3456

--- 8. CVE-2026-3456 – OAuth2 PKCE Race Condition Account T...

Exploit for CVE-2026-5432

--- 7. CVE-2026-5432 – GraphQL Batching Alias Confusion SQL...

2025hvv-poc

2025hvv-poc Record...

Exploit for CVE-2026-7878

--- 6. CVE-2026-7878 – eBPF Verifier Type Confusion → Kernel...

Exploit for CVE-2026-7878

--- 6. CVE-2026-7878 – eBPF Verifier Type Confusion → Kernel...

Exploit for Injection in Yonyou Ksoa

--- 5. CVE-2026-1122 – IoT Firmware Update Signature Bypass...

Exploit for CVE-2026-2828

--- 4. CVE-2026-2828 – WebGPU Cross‑Origin Pixel Stealing vi...

Exploit for Improper Privilege Management in Google Chrome

--- 3. CVE-2026-9999 – Serverless Function Event Injection...

Exploit for Improper Privilege Management in Google Chrome

CVE-2026-9999 – Serverless Event Injection to Code Overwrite...

Exploit for Improper Output Neutralization for Logs in Neo4J

CVE-2026-1337 – AI Coding Assistant Prompt Injection to RCE !...

📄 Gogs 0.13.3 Authenticated Remote Code Execution

A proof of concept exploit for a Gogs version 0.13.3 authenticated remote code execution vulnerability. Gogs versions 0.13.3 and earlier contain a symlink handling flaw in the PUT /api/v1/repos///contents/ endpoint where updates to existing files bypass the symlink protection introduced for...

📄 Telenia Software TVox 26.5.3 Local Privilege Escalation

Telenia Software TVox versions 26.5.3 and below suffer from a local privilege escalation vulnerability. ------------------------------------------------------------------------------- Telenia Software TVox = 26.5.3 nice Local Privilege Escalation Vulnerability...

📄 OpenClaw Dashboard Cross Site Scripting

OpenClaw Dashboard suffers from a persistent cross site scripting vulnerability via the lastMessage Session Field. Security Advisory: Stored Cross-Site Scripting Via Agent Messages Leading To Session Token Theft openclaw-dashboard Title: OpenClaw Dashboard Stored XSS via lastMessage Session Field...

📄 Telenia Software TVox 26.5.3 Authentication Bypass

Telenia Software TVox version 26.5.3 and below suffer from an authentication bypass vulnerability in setenv.php. --------------------------------------------------------------------------------- Telenia Software TVox accessToken !== trim$accessToken 300. $force = true; 301. i...