GHSA-FCM4-4PJ2-M5HF

creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:47+00:00| published-proof-of-concept| Telegram/CfZ2Rt5oDMh5hfP6-7c66YyHAz2lNtcnTrevEl4rY2ivCc...

PT-2026-30029

Name of the Vulnerable Software and Affected Versions Casdoor version 2.356.0 Description A flaw exists in the OAuth Authorization Request Handler component that allows for open redirect attacks. Manipulation of the redirect uri argument can be exploited remotely. The exploit is publicly availabl...

CVE-2025-43257

creationtimestamp| type| source ---|---|--- 2026-04-02 22:22:27+00:00| published-proof-of-concept| Telegram/LEqzgESE2wGHUVmUGbeDXDuSp8F8SqNkH2O3nuA9SKVO2A...

GHSA-3458-R943-HMX4

creationtimestamp| type| source ---|---|--- 2026-03-31 17:24:25+00:00| published-proof-of-concept| Telegram/WxHgPFElWYDoFBGl3K0BVKfspuGbiR8geCdPJnxqtoWdxxM...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Exploit Development Demo This repository demon...

📄 FreeBSD Routing Socket Input Validation

This proof of concept exploit attempts to test the robustness of the FreeBSD routing socket subsystem by crafting a RTMADD message containing an intentionally oversized sockaddr structure salen greater than the traditional sockaddrstorage limit of 128 bytes...

CVE-2026-3054

The CVE affects Alinto SOGo 5.12.3/5.12.4 . The vulnerability is in an unknown function where manipulating the argument hint leads to cross-site scripting (XSS) . It is described as injectable remotely with an exploit publicly available . The vendor was contacted but did not respond. The document...

📄 RuoYi 4.7.9 Advanced SQL Injection Exploitation Toolkit

This Python script is a sophisticated SQL injection exploitation tool that targets Java web applications specifically RuoYi framework, with additional remote code execution capabilities. The tool performs blind SQL injection attacks and includes multiple methods for escalating from SQL injection ...

CVE-2026-25760

creationtimestamp| type| source ---|---|--- 2026-02-05 21:01:55+00:00| published-proof-of-concept| https://github.com/BishopFox/sliver/security/advisories/GHSA-2286-hxv5-cmp2...

CVE-2020-37042

Frigate Professional 3.36.0.9 contains a local buffer overflow in the Find Computer input field, enabling arbitrary code execution when a crafted payload overflows the computer name. In all connected sources, the vulnerability is demonstrated by launching the calculator as a proof of concept. The...

MAL-2026-504 Malicious code in researchpoc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 20a5e6f7ec432b0c41646f696c530fb5e46e034477a23d448de1ac3f18172bec Package mentions being a research PoC, probably for dependency confusion, but the code is obfuscated making verification of the claim impossible. --- Category:...

CVE-2025-14522

creationtimestamp| type| source ---|---|--- 2026-01-09 02:01:06+00:00| published-proof-of-concept| Telegram/9r3a4T582Uj-d8cAzOCMsayyXRdqw-Vs2IIS-Y7LNVntDY...

GHSA-P85G-F9Q7-JMJX

creationtimestamp| type| source ---|---|--- 2026-01-06 16:03:52+00:00| published-proof-of-concept| Telegram/FgOoUYfy76mKk0ne6ntnrdKdY81xQt-oGQxIfAXT2Hgzdk...

CVE-2025-43320

creationtimestamp| type| source ---|---|--- 2026-01-05 19:06:38+00:00| published-proof-of-concept| Telegram/fMtvesIEGvLKzgXVr04EQ2rBgwnPRUk0FUIDqd1543CWh4...

Exploit for CVE-2025-1974

CVE-2025-1974-PoC-exploit Kubernetes Ingress-nginx RCE Ingres...

Update on React Server Components RCE Vulnerability (CVE-2025-55182 / CVE-2025-66478)

The attack landscape has been dynamic following the disclosure of the React Server Components RCE vulnerability. New information has emerged regarding the initial Proof-of-Concept exploit, as well as improved detection methods, exploitation mechanics observed in the wild, and rapidly growing atta...

CVE-2025-66297

creationtimestamp| type| source ---|---|--- 2025-12-01 15:55:48+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-858q-77wx-hhx6...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-...

CVE-2025-38678

creationtimestamp| type| source ---|---|--- 2025-11-24 15:00:07+00:00| published-proof-of-concept| Telegram/5Go4y9Sp59a8HRsoMaTj0X-e6nFTkvRgJdqk6vUB2AgWKv0 2025-11-27 07:58:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60913...

Exploit for CVE-2025-38678

CVE-2025-3...