Exploits

CVE-2021-22205 - GitLab Unauthenticated Remote Code Execution

Dependabot security automerge test - ejs CVE-2022-29078

Exploit para RCE (Remote Code Exec) CVE de plugin vulnerable en Wordpress WP-Discuz en versión 7.0.4

Proof of Concept of CVE-2026-38526 in Krayin CRM <= v2.2.x. Arbitrary File Upload leading to Remote Code Execution

npm repo with ejs CVE-2022-29078 (CVSS 9.8, EPSS 32%) for Dependabot automerge testing

Proof of concept for CVE-2026-56111, an out-of-bounds write in the M421 G-code handler of Marlin Firmware

CVE-2025-57819 FreePBX SQLi RCE PoC

Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter | Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' Leading to Account Takeover

ROOT TOOL

Khai thác lỗ hổng bảo mật CVE-2025-55182

Lỗ hổng FORTIWEB_CVE-2025-64446 & CVE-2025-58034

DAHUA_AUTH-BYPASS-CVE-2021-33044

Unauthenticated RCE PoC for CVE-2026-48908 SP Page Builder (Joomla) arbitrary file upload and remote code execution exploit with mass scaning support.

CraftCMS CVE-2025-32432 - Clean PoC

CVE-2026-48908 - SP Page Builder Joomla Unauthenticated RCE

CVE-2026-8461 - Draft

CVE-2026-31431 getroot.c from a Turkish Malware

CVE-2026-49777, CVE-2026-10735 - Draft