Code Analysis

aelmokhtar/cve-2024-34716

Proof-of-concept exploit for CVE-2024-34716, a PNG-driven XSS to RCE chain in PrestaShop 8.1.5, enabling remote code execution via crafted image…

itsmehrawrxd/rawrxda

RawrXDA

123wwwa/flowname

Next-generation JavaScript identifier recovery with LLMs.

sourceincite/cve-2021-26121

Proof-of-concept exploit for CVE-2021-26121: Server-Side Template Injection in CS-Cart <=4.12.x allowing shop admin to achieve remote code execution…

haile01/perl_spreadsheet_excel_rce_poc

POC for RCE vulnerability in ParseExcel library, and ParseXLSX too, as a depending library

contrastsecurity/contrast

SAST CLI for scanning Java, JavaScript, and .NET applications plus AWS Lambda functions, detecting code vulnerabilities and over-permissive IAM…

jas502n/cve-2020-26259

CVE-2020-26259: XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has…

mudongliang/source-packages

This repo stores source code of the vulnerable program.

iamavu/zairo

Scans code diffs with context to build an impact graph and uses LLMs to find vulnerabilities, supporting multi-repo scans and CI gating with SARIF…

nccgroup/rustproofing-linux

Educational examples porting Linux kernel vulnerabilities to Rust, featuring intentionally vulnerable code and exploits for learning kernel security…

redteampentesting/moodle-rce-calculatedquestions

Scripts for Analysis of a RCE in Moodle Calculated Questions (CVE-2024-43425)

typedefabcd1234ntd/cve-2026-2002-poc

CVE-2026-2002 writeup and Proof-of-concept

jackadamson/cve-2021-26700

Proof-of-concept for CVE-2021-26700: remote code execution in the VSCode npm-script extension via malicious workspace settings.json, with detailed…

ajdumanhug/cve-2023-46818

CVE-2023-46818 Python3 Exploit for ISPConfig <= 3.2.11 (language_edit.php) PHP Code Injection Vulnerability

aliclub0x00/cve-2025-55182-poc-nextjs

Working proof of concept for NextJS RCE to establish a reverse shell. [React2Shell]

koadt/poc-cve-2025-55182

This repository contains a POC of CVE-2025-55182, a critical (CVSS score 10.0) pre-authentication remote code execution vulnerability affecting React…

koblers/np-audit

Static security analysis for npm packages. Detects obfuscated code, malicious patterns, and known vulnerabilities before installation.

h3st4k3r/cve-2025-30065

Java-based research harness for studying CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization, intended for…