Recent Advisories

Severity ID Title Vendor Product Date Type
NONE E3CA83F2-6C6F-

PartyXSS_E3CA83F2-6C6F-521B-8563-1A3FF0A1EBE5

No description provided...

N/A N/A GITHUBEXPLOIT
MEDIUM 6.8 2065E713-A0BE-

Exploit for CVE-2025-13407_2065E713-A0BE-5D45-B1FE-2006FD5C452F

CVE-2025-13407 GravityForms 2.9.23.1 - Unauthenticated Arbitrary File Upload TELEGRAM GROUP ADRESS: https://t.me/toolsandpoc...

N/A N/A GITHUBEXPLOIT
HIGH 10 48CB0B24-8B26-

create-poc-template-skills_48CB0B24-8B26-5239-AC5C-FDFA59633797

create-poc-template 中文 A skill for AI coding agents, containing the full development reference for Pocsuite3 and Nuclei — so agents stop hallucin...

N/A N/A GITHUBEXPLOIT
MEDIUM 6.5 0C78AA8B-8510-

Exploit for External Control of File Name or Path in Microsoft_0C78AA8B-8510-5DE4-BDFD-0E73FE0B5C98

CVE-2025-24071: NTLM Hash Leak via .library-ms File Metasploit Module This repository contains a Metasploit module to exploit CVE-2025-24071, a vul...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 C558BD70-1D0A-

Exploit for Eval Injection in Xwiki_C558BD70-1D0A-5175-B681-DC19927F031B

CVE-2025-24893 - XWiki Unauthenticated RCE Exploit POC ⚠️ Unauthenticated Remote Code Execution in XWiki 🛠️ PoC implementation by @dollarboysushil ...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 D93E90BB-2B9E-

Exploit for Out-of-bounds Write in Tenda Ac9_Firmware_D93E90BB-2B9E-5BD6-A00A-62EF1D546898

CVE-2025-29384 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-29384, a critical s...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.1 8FE1D006-969F-

Exploit for Improper Authorization in Vercel Next.Js_8FE1D006-969F-54DD-8019-0A83146AD040

CVE-2025-29927-PoC-Exploit Proof-of-Concept for Authorization Bypass in Next.js Middleware You can run this against a vulnerable version here: http...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.3 004E17C4-056B-

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo_004E17C4-056B-597E-B74C-0D0FCCC055C2

CVE-2025-32463-sudo-chwoot PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability - Original PoC sudo-chwoot.sh - CTF Demo chwoo...

N/A N/A GITHUBEXPLOIT
CRITICAL 10 89C72402-67E2-

Exploit for Deserialization of Untrusted Data in Facebook React_89C72402-67E2-5AB5-923D-766EE155B081

🛡️ React2Shell CTF 🚀 Welcome to React2Shell-CTF, a Dockerized environment designed to practice exploiting React2Shell CVE-2025-55182. React2Shell ...

N/A N/A GITHUBEXPLOIT
CRITICAL 10 C864AB49-BD5F-

Exploit for Improper Input Validation in N8N_C864AB49-BD5F-550D-849F-BF3E904AB1CF

CVE-2026-21858 + CVE-2025-68613 - n8n Full Chain Unauthenticated Arbitrary File Read → Admin Token Forge → Sandbox Bypass → RCE | | | |---|---| | C...

N/A N/A GITHUBEXPLOIT