Code Analysis

kavin-jindal/cve-2026-48800-poc

Proof-of-concept exploit for CVE-2026-48800 demonstrating arbitrary code execution in Notepad++ ≤ 8.9.6 via malicious shortcuts.xml. Includes trigger…

dannners/jackson-deserialization-2017-7525

Jackson Deserialization CVE-2017-7525 PoC

hohn/codeql-sample-polkit

All stages of exploring the polkit CVE-2021-4034 using codeql

xmyronn/cve-2026-7393-rce

Proof-of-concept exploit for CVE-2026-7393: unrestricted file upload in Pizzafy Ecommerce System 1.0 allowing authenticated administrators to upload…

kemal-arslan/reposherlock

Analyze any GitHub repo (URL or local path) → architecture map, verified run commands, risks, and actionable issues - in minutes.

nxploited/cve-2025-49029

WordPress Custom Login And Signup Widget Plugin <= 1.0 is vulnerable to Arbitrary Code Execution

unicorn-hyh/cve-2026-31156

There is a path injection vulnerability in OpenPLC-v3, which arises from the program not performing any validity checks on the file path parameters…

e-corp-demo/cve-2026-44788

Proof-of-concept exploit for CVE-2026-44788, demonstrating vulnerability exploitation in C# for security testing and validation.

razi-interactive/claude-project-scanner

Read-only safety scanner for Claude Code projects. Catches CVE-2025-59536, statusLine injection, prompt injection, and more.

bhanunamikaze/cve-2026-2587-exploit-poc

CVE-2026-2587 PoC validator for Eclipse GlassFish EL Injection RCE in the admin console gadget.jsf handler. Safe authenticated vulnerability scanner…

habuon/cve-2026-48208

This is POC repo for CVE-2026-48208

xxconi/cve-2026-22356

CVE-2026-22356: Jetpack CRM Path Traversal Vulnerability and RCE

loic-houchi/django-faille-cve-2025-57833_test

Educational proof-of-concept demonstrating SQL injection via dynamic aliases in Django's annotate() and alias() methods (CVE-2025-57833). Includes…

sparshbiswas-ai/cve-2025-11844-smolagents

Educational sandbox and dynamic proof-of-concept scanner for CVE-2025-11844 XPath injection in Hugging Face smolagents library, enabling local data…

some-1hing/cve-2018-16763

Python tool for analyzing CVE-2018-16763 in FUEL CMS with cleaner response parsing and interactive vulnerability checking.

homjxi0e/cve-2017-8625_bypass_umci

Proof-of-concept exploit demonstrating UMCI bypass in Internet Explorer using JScript and ActiveX to execute arbitrary binaries, targeting Windows…