Exploit for SQL Injection in Fortinet Fortiweb

CVE-2025-25257 Exploits for CVE-2025-25257 released by watchto...

CVE-2025-59420

creationtimestamp| type| source ---|---|--- 2025-09-20 08:10:15+00:00| published-proof-of-concept| https://github.com/authlib/authlib/security/advisories/GHSA-9ggr-2464-2j32...

Exploit for CVE-2025-2894

Unitree Robot BLE Service Command Injection Analysis !Meme...

CVE-2024-57366

creationtimestamp| type| source ---|---|--- 2025-09-20 03:00:05+00:00| published-proof-of-concept| Telegram/SXFD-qVBXvgg67VQCh23mumAE695MVlGdpAI0NU6zP317zs...

WebSockets-C2-PoC

WebSockets-C2-PoC Ab...

CVE-2025-59417

creationtimestamp| type| source ---|---|--- 2025-09-18 14:23:53+00:00| published-proof-of-concept| https://github.com/lobehub/lobehub/security/advisories/GHSA-m79r-r765-5f9j...

Evil Vizier: Vulnerabilities of LLM-Integrated XR Systems

Extended reality XR applications increasingly integrate Large Language Models LLMs to enhance user experience, scene understanding, and even generate executable XR content, and are often called "AI glasses". Despite these potential benefits, the integrated XR-LLM pipeline makes XR applications...

Exploit for Stack-based Buffer Overflow in Microsoft

CV...

CVE-2017-11366

creationtimestamp| type| source ---|---|--- 2025-09-17 21:00:04+00:00| published-proof-of-concept| Telegram/IechzTJqEoGzyCNt3bqa1OsFAGBEn8a-qVqD1btrcdGoLD8...

CVE-2017-15689

creationtimestamp| type| source ---|---|--- 2025-09-17 21:00:04+00:00| published-proof-of-concept| Telegram/IechzTJqEoGzyCNt3bqa1OsFAGBEn8a-qVqD1btrcdGoLD8...

Exploit for CVE-2010-1240

CVE-2010-1240 PDF Launch Action Research Tool !Pythonhttps...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack via the verifyClientProof function which use Arrays.equals function. An attacker can infer sensitive authentication material by exploiting timing differences during the comparison of secret values. Remediation Upgrade...

CVE-2025-59377

creationtimestamp| type| source ---|---|--- 2025-09-15 13:18:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51708...

CVE-2024-54566

creationtimestamp| type| source ---|---|--- 2025-09-15 11:31:22+00:00| published-proof-of-concept| Telegram/NY0PhVqFEGahdlKMTXW9KMbuYCC2BEHsndHx5vZ3JyUwA 2025-11-10 00:10:21+00:00| published-proof-of-concept| Telegram/K2VlNUTNNJWNgNBJDb9pzFFq97RFqHYdx8xHhHzC5Ekeew...

Exploit for CVE-2025-38501

Overview Proof-of-Concept exploit for KSMBDrain CVE-2025-3850...

fastjson-remote-code-execute-poc

This is a Java-based proof-of-concept PoC exploit for a remote code execution RCE vulnerability in the FastJSON library, version 1.2.24. The exploit is designed to be used with IntelliJ IDEA, a popular integrated development environment IDE for Java development. The exploit consists of two main...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

This is a proof-of-concept PoC exploit for CVE-2020-0796, also known as SMBGhost, a pre-authentication remote code execution vulnerability in the SMBv3 server of Windows operating systems. The exploit is written in Python and uses the SMB protocol to exploit the vulnerability. The exploit targets...

Exploit for CVE-2020-1189

PoC exploit for CVE-2020-1189, CVE-2020-1190, CVE-2020-1191, CVE-2020-1192, CVE-2020-1193, CVE-2020-1194, CVE-2020-1195, CVE-2020-1196, CVE-2020-1197, CVE-2020-1198, CVE-2020-1199, CVE-2020-1200, CVE-2020-1201, CVE-2020-1202, CVE-2020-1203, CVE-2020-1204, CVE-2020-1205, CVE-2020-1206,...

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team...

Exploit for Use of Uninitialized Resource in Vmware Fusion

This is a VMware Escape Exploit, a proof-of-concept PoC exploit for CVE-2017-4905, targeting VMware WorkStation 12.5.5 and earlier versions. The exploit is designed to escape the VMware environment and execute arbitrary code on the host system. The exploit is written in C and uses a heap...