Code Analysis

polosss/by-poloss..-..cve-2017-20251

Insert PHP Plugin PHP Code Injection

killercd/cve-2026-35414

Demonstrates a proof-of-concept for CVE-2026-35414, showing a vulnerable and fixed version of SSH principal matching logic to illustrate the flaw.

horkimhab/cve-2026-442_

CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44294, CVE-2026-44295 - protobuf.js

davidxbors/cve-2025-25014

Proof-of-concept exploit for CVE-2025-25014: Prototype pollution in Kibana enabling arbitrary code execution via crafted HTTP requests to ML and…

zcrosman/cve-2024-32651

changedetection rce though ssti

kingbangq/cve-2020-13933project

此项目为复现CVE-2020-13933 shiro漏洞所搭建的简易springboot+shiro项目

3ele-projects/cve-2026-39440-funnelforms-fix

Drop-in WordPress plugin that blocks the vulnerable Demo Import handler in FunnelForms Pro to mitigate Remote Code Execution (CVE-2026-39440).

renewablehacking/cve-2020-7598

Educational lab demonstrating CVE-2020-7598 prototype pollution in minimist with a vulnerable Node.js/Express app, exploit payload, and…

lucas-cauhe/cargo-perm

Cargo exploit from CVE-2023-38497

atreb92/cve-2024-37762

Proof-of-concept exploit for authenticated unrestricted file upload leading to remote code execution in MachForm up to version 21, with detailed…

eyodav/cve-2025-34161

Authenticated low-privileged RCE in Coolify via unsanitized shell commands in the Git Repository field.

whattheslime/cve-2025-13486

CVE-2025-13486 - Remote Code Execution & Privilege Escalation exploit

digi4care/shai-scan

Zero-dependency CLI scanner for npm/PyPI supply chain compromises. Detects compromised packages in lockfiles and system-level IOCs from attacks like…

jeanback1/react-rsc-cve-2025-55182-lab

Educational lab demonstrating CVE-2025-55182: Critical RCE in React Server Components via prototype pollution in the Flight protocol

dedellix/mut-bc-ss-01

Mutation testing on X.509 Certificate Validation IN OpenSSL v.1.1.1h, based on CVE-2021-3450.