Exploits

GhostLock (CVE-2026-43499) kernel exploit for Poco M6 Pro (emerald) with locked bootloader

Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()

Unauthenticated RCE in DBGate <= 7.1.8

Unauthenticated Address Book Modification on Sharp MX/BP Multifunction Printers

Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()

Full VAPT writeup of OWASP CICD-Goat — 9 CTFd flags captured, 4 critical + 5 high findings (incl. CVE-2024-23897) mapped to the OWASP Top 10 CI/CD Security Risks, with PoCs, remediation, and interview-ready summaries.

SlashID fork of conductorone/baton-retool — pgx/v5 port (CVE-2026-32286, CVE-2026-41889); retire when upstream ships pgx/v5

VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)

CVE-2026-31431 Copy Fail PoC and exploit

This is the compiled version. This is not my program though. This is only for directly downloading the compiled version in labs where there is no gcc

CVE-2026-8347 is an Insecure Direct Object Reference (IDOR) combined with a wrong authorization level vulnerability in Concrete CMS versions 9.5.0 and earlier. The flaw exists in the Express association Reorder dialog, allowing a user with only view permissions on an Express entry to modify the ordering of associations for another entity.

CVE-2026-54121(CertiGhost) without MachineAccountQuota POC

This is N-day patch we releasing by testing our model capabilities

Authenticated Blind OS Command Injection in ClearOS

A Metasploit auxiliary module that escalates from any low-privileged domain user to full domain compromise by abusing the AD CS enrollment "chase" fallback. The CA can be coerced into authenticating back to attacker-controlled infrastructure and then issuing a certificate that impersonates a Domain Controller.

Unprivileged user to root on macOS Sonoma, Sequoia, and Tahoe. Patched in macOS 26.6 / 15.7.8 / 14.8.8.

Comprehensive technical research on CVE-2026-43284 (Dirty Frag), including Linux kernel internals, root cause analysis, patch analysis, detection engineering, threat hunting, incident response, and Kubernetes security implications.

Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.