[POC] CVE-2025-65427 — CVE-2025-65427Dec 16, 2025
pocexploitCVE-2025-65427
CVE-2025-65427: Missing rate limiting in Dbit N300 T1 Pro router login API allows brute-force attacks
Security advisory for CVE-2025-65855
Insecure attachment handling when using Canary Mail or Blue mail
GIT vulnerability | Carriage Return and RCE on cloning
CVE-2025-54100 (CVSS 7.8 High) is a command injection vulnerability in the Invoke-WebRequest cmdlet of Windows PowerShell 5.1. It arises from improper neutralization of special elements during the automatic parsing of Web responses.
SQL Injection in krishanmuraiji SMS v1.0 (CVE-2025-66947)
Unauthenticated Access to Uploaded Files
File upload vulnerability in machsol machpanel 8 allows attacker gain a webshell.
A proof of concept of remote code execution
Reverse engineering research and custom firmware for the Allwinner V3-based SJCAM SJ4000 Air, including firmware parsers, an AVIOCTRL client, security research, and the CVE-2026-52656 proof of concept.
3 linux kernel bugs chains to do secure comm app using side channel to establish key and establish covert channe;
Directory traversal in Gitea and Forgejo's repository‑template processing allows remote authenticated attackers to process arbitrary files on the filesystem, leading to remote code execution.
CVE-2020-26217 XStream反序列化的poc
Path traversal tool based on cve-2025-8088