pocexploitCVE-2025-32432
A exploit to obtain RCE in CRAFTCMS
Information on the security content of Apple software updates
container escape POCs for CVE-2026-80521 and CVE-2026-52910
Issabel pbxapi hard coded JWT RCE POC
Proof of Concept and Write-up for CVE-2026-56096 (Blind Parameter Injection in TYPO3 EXT:solr)
research on finding the bug and fix of CVE-2026-84616 and CVE-2026-84607
A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.
Langflow 1.10.0 urllib SSRF POC
Tenda Technology Co., Ltd NVR_4H: CH3 v2.1.V27.5.58.6 was discovered to contain a hardcoded cryptographic key.
PoC for CVE-2026-59346 - 32-bit integer overflow in VMware's VMXNET3 TSO segmentation path, guest-to-host crash.
CVE-2026-76461 - Draft or TODO
CVE-2026-85706 — GitLab unauthenticated arbitrary file read (CVSS 10.0). Root-cause analysis, vulnerable Docker lab, and PoC.
Standalone PoC for CVE-2026-90782: status-clobbering NULL dereference in S2OPC alloc_notification_message_items() (DataChange fails, Event succeeds)
CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read exploit PoC.
CVE-2026-85706 · GitLab CE/EE unauthenticated file read · research PoC with oracle mode, fd enumeration, and tiered loot targeting
Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content
Temporary authorized Devin CVE-2025-48384 reachability probe
cve-2026-85706-poc-exploit-gitlab