PoC-Analyzer

PoC Analyzer Proof-of-Concept Malicious Intent Detector !P...

📄 Institute Admission Software 2.5 SQL Injection

Institute Admission Software version 2.5 suffers from a remote SQL injection vulnerability. ============================================================================================================================================= | Title : Institute Admission Software 2.5 SQL INjection...

CVE-2025-67743

creationtimestamp| type| source ---|---|--- 2025-12-22 23:48:26+00:00| published-proof-of-concept| https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-9c54-gxh7-ppjc...

CVE-2025-14302

creationtimestamp| type| source ---|---|--- 2025-12-22 08:39:26+00:00| published-proof-of-concept| https://t.me/xakepru/18676...

📄 Adobe DNG SDK RefBaselineABCDtoRGB Out-Of-Bounds Read

This report details the creation of a specification-compliant, engineering-grade proof of concept file that reliably triggers the out-of-bounds read vulnerability documented as CVE-2025-64893 in Adobe DNG SDK versions 1.7.1 and below...

CVE-2025-67435

creationtimestamp| type| source ---|---|--- 2025-12-21 03:00:06+00:00| published-proof-of-concept| Telegram/t-VGx2tYz7zkt5cKHuKO0m7dpm-T1fz3zebST3-fjI9Ic 2026-01-02 18:48:53+00:00| published-proof-of-concept| Telegram/YF7SiVU4fRdeEbPrgEybP1PhAHJtxgx2UciXBwDQ1HiRhM...

Exploit for Deserialization of Untrusted Data in Facebook React

Next.js React2Shell CVE-2025-55182 Exploit Tool A proof-of-...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 POC This repository contains a proof of conce...

CVE-2025-67886

creationtimestamp| type| source ---|---|--- 2025-12-18 15:00:09+00:00| published-proof-of-concept| Telegram/7hKD5YeJK0RQiIJ3OrJi5geFO0owuRt0spxMlfyZ7RMSrKY 2026-05-08 08:55:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mldebbbbtx2t...

CVE-2025-14096

A vulnerability exists in multiple Radiometer products that allow an attacker with physical access to the analyzer possibility to extract credential information. The vulnerability is due to a weakness in the design and insufficient credential protection in operating system. Other related CVE's ar...

Exploit for CVE-2025-61260

OpenAI Codex CLI Vuln...

CVE-2025-67164

An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file...

NGCaptcha: A CAPTCHA Bridging the past and the Future

CAPTCHAs are widely employed for distinguishing humans from automated bots online. However, current vision based CAPTCHAs face escalating security risks: traditional attacks continue to bypass many deployed CAPTCHA schemes, and recent breakthroughs in AI, particularly large scale vision models,...

📄 Kalmia CMS 0.2.0 User Enumeration

Proof of concept exploit that demonstrates a user enumeration vulnerability via the JWT authentication API on Kalmia CMS version 0.2.0. ============================================================================================================================================= | Title : Kalmia CM...

CVE-2025-68147

creationtimestamp| type| source ---|---|--- 2025-12-17 21:00:04+00:00| published-proof-of-concept| Telegram/LegeDtMxRTlSxU-E4vRWPyR6r8eVZBSkTQd0bvp4AR24yPQ...

Exploit for CVE-2025-14700

CVE-2025-14700 POC Automatic exploit for Authentic...

Pagekit CMS is vulnerable to OS Command Injection via Storage component

An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file. The project is archived as of December 1, 2023...

EUVD-2025-203895

A vulnerability in the application software of multiple Radiometer products may allow remote code execution and unauthorized device management when specific internal conditions are met. Exploitation requires that a remote connection is established with additional information obtained through othe...

EUVD-2025-203889

A vulnerability exists in multiple Radiometer products that allow an attacker with physical access to the analyzer possibility to extract credential information. The vulnerability is due to a weakness in the design and insufficient credential protection in operating system. Other related CVE's ar...

CVE-2025-14097

A vulnerability in the application software of multiple Radiometer products may allow remote code execution and unauthorized device management when specific internal conditions are met. Exploitation requires that a remote connection is established with additional information obtained through othe...