Code Analysis

nanopathi/external_expat_aosp10_r33_cve-2022-22822tocve-2022-22827

Patched version of the Expat XML parser library addressing multiple CVEs (CVE-2022-22822 through CVE-2022-22827) for AOSP 10 r33, providing…

cyberok-org/cve-2025-67887

Detailed analysis and PoC for CVE-2025-67887/86 RCE in 1C-Bitrix Translate module, including exploit chain, CVSS scoring, and mitigation…

wubinworks/magento2-template-filter-patch

Magento 2 patch for CVE-2022-24086, CVE-2022-24087. Fix the RCE vulnerability and related bugs by performing deep template variable escaping. If you…

shoucheng3/dspace__dspace_cve-2016-10726_4-4

Repository containing the DSpace 4.4 source code with a focus on CVE-2016-10726, providing a reference for vulnerability analysis and educational…

arsalanraja987/gradle-cve-2021-29427-demo

gradle cve

shoucheng3/asf__tapestry-5_cve-2019-0207_5-4-4

Proof-of-concept exploit for CVE-2019-0207 in Apache Tapestry 5.4.4, demonstrating remote code execution via deserialization vulnerability.

redyank/cve-2026-33154

Proof-of-concept exploit for CVE-2026-33154, demonstrating remote code execution via SSTI in Dynaconf's Jinja resolver, with analysis and mitigation…

q1uf3ng/cve-2025-51458-exp

CVE-2025-51458 - DB-GPT Pre-Auth SQL Injection PoC

shoucheng3/srikanth-lingala__zip4j_cve-2018-1002202_1-3-2

Decompiled source code of zip4j library versions 1.3.2 (vulnerable) and 1.3.3 (fixed) for CVE-2018-1002202 path traversal analysis, part of the…

sandblastx/flask-vuln-v6

CVE-2024-34064 demo - v6 sanitisation applied to wrong variable

mahaveer-choudhary/cve-2025-55182

A Python-based security scanner for detecting and exploiting **React Server Components (RSC)** vulnerabilities in Next.js applications. This tool…

jfrog/jfrog-cve-2022-24675

Shell script to recursively scan folders for Go binaries using insecure pem.Decode function, detecting vulnerable or stripped binaries for…

seoqqq/cve-2018-6574

Remote command execution in Golang go get command allows an attacker to gain code execution on a system by installing a malicious library.

joshterrill/cve-2025-55182-realistic-poc

a realistic POC demonstrating the missing `hasOwnProperty` check in [email protected]

4rtamis/cve-2022-23614

Proof of concept for CVE-2022-23614 (command injection in Twig)

pazhanivel07/openjpeg-2.3.0_cve-2020-27824

CVE-2020-27824 exploit reproduction environment for OpenJPEG JPEG 2000 codec, enabling vulnerability analysis, fuzzing, and binary exploitation…