pocexploitGHSA-652q-gvq3-74qv
CVE Reproduction: cve-2024-49039-task_scheduler_eop_reproduction
CVE Reproduction: cve-2024-4577-phpcgi_rce_reproduction
CVE Reproduction: cve-2024-43451-ntlm_hash_disclosure_reproduction
CVE Reproduction: cve-2024-38077-madlicense_reproduction
CVE Reproduction: cve-2024-0012_9474-panos_authbypass_reproduction
CVE-2026-46331 and CVE-2026-43503
PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender.
Exploit for CVE-2025-64512 to get a reverse shell.
A minimalist Local Privilege Escalation (LPE) vulnerability checker for CVE-2023-21817 (Windows Kerberos LPE) written in C++.
CVE-2026-63030 & CVE-2026-60137 Wp2shell Poc
CVE-2026-16540 — Simply Schedule Appointments < 1.6.12.6 Unauthenticated Appointment Data Disclosure and Mass Deletion
CVE-2026-14266 - XZ Heap Buffer Overflow PoC Generator for 7-Zip
full javascript reproduction of CVE-2026-63030 (author_exclude, author__not_in and misalignment between validations and matches)
Scan WordPress installations for wp2shell vulnerabilities (CVE-2026-63030 + CVE-2026-60137). Identifies full RCE and SQL injection risks across multiple sites with severity classification and CSV reporting.
Pre-auth RCE PoC for WordPress core — chains CVE-2026-63030 (REST /batch/v1 route-confusion desync) with CVE-2026-60137 (author__not_in SQLi) into an unauthenticated shell. Authorized testing only.
CVE-2026-43499 PoC Scanner