Code Analysis

shoucheng3/esapi__esapi-java-legacy_cve-2022-23457_2-2-3-1

Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input validation,…

arsalanraja987/java-log4j-cve-2020-9488

Demo of CVE-2020-9488: Unsafe logging with Log4j and remediation

tom025/ply_exploit_rejection

Arguments to reject CVE-2025-56005

nihilor/cve-2025-54313

Checks projects for compromised packages, suspicious files, and import statements.

trinadh465/external_libexif_aosp10_r33_cve-2020-0198

C library for parsing, editing, and saving EXIF metadata, with a focus on addressing CVE-2020-0198 in AOSP10.

shoucheng3/x-stream__xstream_cve-2013-7285_1-4-6

Java XML serialization library with a focus on the CVE-2013-7285 deserialization vulnerability, providing source code, binaries, and documentation…

shoucheng3/apache__sling-org-apache-sling-servlets-resolver_cve-2024-23673_2-10-0

Analysis and exploitation code for CVE-2024-23673, a vulnerability in Apache Sling Servlet Resolver, enabling targeted security testing of…

rain321654/yasa-cve-2024-43400-main1

yasa

knqyf263/cve-2018-11235

Proof-of-concept exploit for CVE-2018-11235, a remote code execution vulnerability in Git submodules. Includes Dockerfile for reproducible testing…

dsfau/cve-2018-10546

Proof-of-concept exploit for CVE-2018-10546: crafted data triggers infinite loop via PHP stream filter 'convert.iconv.*', causing CPU exhaustion in…

albisorua/poc-cve-2019-10743

Proof-of-concept exploit demonstrating the Zip Slip vulnerability (CVE-2019-10743) in mholt/archiver, with a vulnerable server and Python payload for…

3rg1s/cve-2016-2098

Proof-of-concept exploit for CVE-2016-2098, demonstrating remote Ruby code execution through Rails render method abuse; intended for security testing…

w2xim3/cve-2023-6933

Introduction to CVE-2023-6933 Vulnerability

shoucheng3/nahsra__antisamy_cve-2016-10006_1-5-3

Fast, configurable HTML sanitization library for preventing XSS and malicious code injection from untrusted user input. Provides a policy-driven API…

murataydemir/cve-2024-23897

[CVE-2024-23897] Jenkins CI Authenticated Arbitrary File Read Through the CLI Leads to Remote Code Execution (RCE)

ianxtianxt/cve-2019-11043

Remote code execution exploit for CVE-2019-11043 targeting Nginx with php-fpm. Includes Go and pre-compiled exploit binaries for testing vulnerable…