Python POC, Exploit for CVE-2026-33017
A modified version of the Rapid7 Metasploit module for CVE-2021-27877 that supports direct command execution for reliable vulnerability validation. Includes documentation explaining the exploit workflow, the module modifications, and usage examples.
My take on unlocking Xperia 5 SO-01M for p42 bootloader using CVE-2021-1931
Proof-of-concept exploit and lab environment for CVE-2026-25194
CVE-2026-30784: RustDesk hbbs Traffic Amplification PoC & PCAP Analysis
Gogs has Path Traversal in organization name that results in RCE through Git hooks
Crawl4AI <= 0.8.6 pre-auth RCE via AST sandbox escape (gi_frame.f_back.f_builtins chain) — CVSS 10.0
CVE-2025-69212 Proof-of-concept.
🛡️ CVE Proof-of-Concept Hub — 21 security advisories · 80+ vulnerabilities · 19 CVEs under review · 1 PUBLISHED (CVE-2026-66412)
OpenSTAManager RCE Exploit (CVE-2026-38751)
CVE-2025-69212 - OpenSTAManager OS Command Injection PoC
O F5 BIG-IP é uma plataforma de entrega e segurança de aplicações amplamente utilizada em ambientes corporativos. A CVE-2020-5902 é uma vulnerabilidade crítica no TMUI que, em versões não corrigidas, pode permitir acesso não autorizado e execução remota de código, reforçando a necessidade de atualização e gestão contínua de vulnerabilidades.
CVE-2026-6307 PoC: Longinus - 2 Boundaries in One Bug https://nebusec.ai/research/v8-cve-2026-6307-writeup/)
CVE-2026-48907 PoC
Google Chrome CVE-2026-6307 PoC
scuffed PoC for CVE-2026-23111. Made and ran on Linux Kernel 6.12.69
Blue-team lab: detecting & mitigating CVE-2025-24054 (Windows NTLM hash disclosure) with Sysmon, Wazuh SIEM, and Group Policy
A flaw was found in NGINX, specifically within the ngx_http_rewrite_module. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests under specific rewrite configurations. This can lead to a heap buffer overflow in the NGINX worker process, which may result in arbitrary code execution