🚨PoC for CVE-2024-51378; CyberPanel Command Injection Vulnerability

My very first blog post is live: During research,... I've run into and documented a simple universal SQLite Injection RCE trick. Enjoy! N-day Analysis about Synology Beestation RCE (CVE-2024-50629~50631) by legendary DEVCORE 🎃 🍊 Thanks to Pumpkin 🎃 Orange Tsai 🍊 for original finding and allowing to post, and to Ryan Emmons for the invaluable references 🔥 Enjoy the Demo! PoC:show more

qwerty and I exploited a VSock 1-day in Google... kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04show more

I've confirmed Samsung's MagicINFO 21.1050 is VULNERABLE to the... publicly reported POC in the blog below. The media is reporting this as CVE-2024-7399, but if it is then the patch is incomplete. There is currently NO PATCH AVAILABLE!show more

Exploit Demo & Analysis Article by 78ResearchLab(78ResearchLab) CVE-2026-20817 :... Windows Error Reporting(WER) Service Elevation of Privilege Vulnerability #CVE_2026_20817 #LPE #Windowsshow more

1/ A DoS exploit demo for CVE-2024-49112 by SafeBreach.... RCE exploit is probably coming soon. Patch!show more

Our team has just successfully reproduced the IngressNightmare vulnerability... (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asmshow more

Video of my PoC for CVE-2023-43641: out-of-bounds array access... in libcue. libcue is used by tracker-miners, which automatically scans new files in ~/Downloads, so the bug is triggered by downloading a file.show more

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains... a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbountyshow more

EvilLoader: Yesterday was published PoC for unpatched vulnerability affecting... Telegram for Android The exploit has been sold on underground forum since January 2025 ✅Don't install external players if requested by received corrupted video file on Telegramshow more

Microsoft has addressed a one-click NTLM leak vulnerability affecting... Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:show more

Meet our new buddy, Argusee — an AI-powered, automated... vulnerability hunter that has already discovered 15+ vulnerabilities across projects, including a previously unknown Linux kernel flaw (CVE-2025-37891) enabling LPE. Demo and details:show more

27 Octubre, 2017 19 Descembre, 2024 Delirant, vergonyós, patètic... , insultant …. és poc !show more

Think you’ve seen every OS command injection trick? Think... again, read our latest blog post! Link in the comments👇show more

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an... attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in repliesshow more

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ,... exploiting the vm:// protocol to achieve Remote Code Executionshow more

Hot off the press from watchTowr Labs member SinSinology,... with a nice side of silent patching from Veeam 😉 details to come later (CVE-2024-40711 and friends..). Special thanks to Soroush Dalili for his help with this exploit!show more

M’ho han d’explicar a poc a poc, perquè no... ho entenc.show more

Least favorite weekend... bye far #GoCougs #CVE #byefelicia #pleasecomeback