
NoFrak
Proof Of Concept for Android. NoFrak is designed to prevent fracking attacks, as described in "Breaking and Fixing Origin-Based Access Control in…

Proof Of Concept for Android. NoFrak is designed to prevent fracking attacks, as described in "Breaking and Fixing Origin-Based Access Control in…

Proof-of-concept for CVE-2025-66024: Stored XSS in XWiki Blog Application via unescaped post title in HTML title tag. Includes reproduction steps,…

This is a suite of tools/PoCs/exploits for cameras using the iCSee application. And yes - it can run NES games!

Proof-of-concept demonstrating React2shell vulnerability (CVE-2025-66478) in a Next.js application, providing a base for reproduction and…

This tool demonstrates the application of fundamental physics discoveries to cybersecurity.

Improper Certificate Chain Validation in EagleEyes Lite Android Application

CVE-2026-34038: Authenticated Remote Command Injection in Coolify

Stored XSS proof-of-concept for OpenKM notes section, demonstrating a javascript: bypass of sanitization rules, with CVSS 3.1 scoring and…

A PoC for demonstrating CVE-2026-26903

Proof-of-concept exploit for CVE-2025-52399, demonstrating SQL injection in the loginlinkfaculty endpoint of Institute-of-Current-Students, enabling…


Information about CVE-2021-43141, a reflected XSS in the plan_application section.

Research report detailing CVE-2019-6447 exploitation in real-world mobile applications, including practical examples and a demonstration video.