
CVE-2024-42327
Proof-of-concept exploit for CVE-2024-42327, an SQL injection vulnerability in Zabbix frontend API allowing non-admin users to execute arbitrary SQL…

Proof-of-concept exploit for CVE-2024-42327, an SQL injection vulnerability in Zabbix frontend API allowing non-admin users to execute arbitrary SQL…

Authenticated privilege escalation in Camaleon CMS v2.9.0 via improper parameter handling in the updated_ajax endpoint.

详细讲解CitrixBleed 2 — CVE-2025-5777(越界泄漏)PoC 和检测套件

Automated exploitation tool targeting CMS vulnerabilities in Joomla, WordPress, Drupal, PrestaShop, and OsCommerce with built-in brute-force and…

BoltWire v6.03 vulnerable to "Improper Access Control"

POC for CVE-2024-42327: Zabbix Privilege Escalation -> RCE

patched to work

Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 | XSS to RCE

Exploit script for CVE-2023-24249 - a vulnerability allowing remote code execution via file upload and command injection.

just record for myself

CVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection

Perform With Massive Openfire Unauthenticated Users

simple urls < 115 - Reflected XSS

A PoC exploit for CVE-2024-27198 - JetBrains TeamCity Authentication Bypass


SQL Injection Vulnerability on PhpIPAM v1.4.4

Exploit of the privilege escalation vulnerability of the WordPress plugin "WP GDPR Compliance" by "Van Ons"…

CVE-2020-14008 - ManageEngine Applications Manager RCE