Exploits

CVE-2021-41773 Apache

Test server and PoC

CVE-2026-64600 - Draft - Check todo

PoC and test server

Metabase CVE-2026-59827 Vulnerability Scanner

Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combined of CVE-2026-49881 and CVE-2026-43284

Full kill chain for HTB SmartHire: from reconnaissance to root. Covers vhost discovery, MLflow RCE (CVE-2024-37054), bind shell, and privilege escalation using Python module hijacking. A clean writeup for cybersecurity portfolio.

CVE Reproduction: cve-2026-63030_60137-wordpress_rce_reproduction

CVE Reproduction: cve-2026-41940-cpanel_authbypass_reproduction

CVE Reproduction: cve-2026-34486-tomcat_encrypt_bypass_reproduction

CVE Reproduction: cve-2026-21509-office_security_bypass_reproduction

CVE Reproduction: cve-2026-0770-langflow_rce_reproduction

CVE Reproduction: cve-2025-61882-oracle_ebs_rce_reproduction

CVE Reproduction: cve-2025-5777-citrixbleed2_reproduction

CVE Reproduction: cve-2025-55182-react2shell_reproduction

CVE Reproduction: cve-2025-2783-chrome_sandbox_escape_reproduction

CVE Reproduction: cve-2025-24472-fortinet_authbypass_reproduction

CVE Reproduction: cve-2024-50330-ivanti_epm_sqli_reproduction