Exploits

CVE-2026-43499 exploit with OnePlus Ace3 support

CVE-2026-43499 exploit reproduction on jinghu (Xiaomi Pad 7 Ultra)

CVE-2026-34197 - Apache ActiveMQ Jolokia Remote Code Execution (RCE)

CVE-2026-43499 exploit reproduction on jinghu (Xiaomi Pad 7 Ultra)

Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.

this is a modified POC of rz1027 for CVE-2026-20896

Reproducer for CVE-2026-46726: Apache Camel camel-vertx-websocket unfiltered inbound header injection enabling SSRF and secret disclosure via property-placeholder resolution (fixed in 4.14.8/4.18.3/4.21.0)

🔐 CVE-2026-57821 - Apache Fineract SQL Injection Toolkit (Educational) 📚 Two Python scripts for authorized security testing: verifier.py (safe detection, no extraction) and exploit.py (deep analysis). Supports 11 DB types. Perfect for understanding SQL injection vulnerabilities. ⚠️ for educational & research purposes only.

KVM KernelCare + Januscape (CVE-2026-53359) verification & mitigation scripts

Complete exploitation toolkit for CVE-2026-3180 - WordPress Contest Gallery SQL Injection vulnerability. Features automated data extraction, WAF bypass, reverse shell, SQLMap integration, Burp extension generation, and reporting for penetration testing and security research.

Proof of concept for CVE-2026-54992, an MSMQ remote-read integer overflow

Reproducer for CVE-2026-46592: Apache Camel camel-cxf operationName header injection redirecting the invoked SOAP operation (confused deputy) from a read to a destructive one (fixed in 4.14.8/4.18.3/4.21.0)

Next.js RSC RCE Exploit Tool (CVE-2025-55182)

Unofficial Bash IoC checker for SonicWall SMA1000 appliances affected by actively exploited CVE-2026-15409 and CVE-2026-15410.

Galaxy S25 Ultra SM-S938N S938NKSUACZF1 port of CVE-2026-43499

Kerberos audit for CVE-2026-20833

CVE Realtek SD card reader. CVE-2022-25477, CVE-2022-25478, CVE-2022-25479, CVE-2022-25480, CVE-2024-40432, CVE-2024-40431

CVE-2022-25476 - Collection