Code Analysis

forse01/cve-2019-5413-netbeans-nojson

Proof-of-concept exploit for CVE-2019-5413, a remote code execution vulnerability in Apache NetBeans. Demonstrates exploitation via crafted XML…

renukaselvar/expat_cve-2024-28757

C library for stream-oriented XML parsing with handler registration, supporting UTF-8/UTF-16 encoding, and autoconf-based build system. Includes…

istern/cve-2023-26262

Proof-of-concept for authenticated arbitrary file upload in Sitecore 10.3, enabling webshell deployment and remote code execution via the import…

screambby/cve-2025-52099

Proof-of-concept for CVE-2025-52099, an integer overflow in SQLite 3.50.0's setupLookaside function leading to heap-buffer-overflow.

abdurahmon3236/cve-2024-6366

Metasploit exploit module for CVE-2024-6366, an unauthenticated file upload remote code execution in WordPress User Profile Builder before 3.11.8,…

nxploited/cve-2024-1247-poc

Post Saint <= 1.3.1 plugin for WordPress Arbitrary File Upload

forse01/cve-2019-5413-netbeans

Proof-of-concept exploit for CVE-2019-5413 targeting NetBeans IDE, demonstrating remote code execution via crafted project files.

morrisel/cve-2023-26136

This repository contains a solution for the CVE-2023-26136 vulnerability.

ahmetmanga/go-get-rce

cve-2018-6574 @pentesterlab

hotblac/text4shell

Demonstration of CVE-2022-42889 (Text4Shell) remote code execution vulnerability in Apache Commons Text with a proof-of-concept exploit.

snappyjack/cve-2018-16370

In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a…

drkbcn/lblfixer_cve_2023_30839

PrestaShop <1.7.8.9 Fix for CVE-2023-30839 and CVE-2023-30545

zur250/zur-go-get-rce-solution

CVE-2018-6574

uthrasri/jetty-9.4.31.v20200723_cve-2023-26049

Exploit code and analysis for CVE-2023-26049 targeting Jetty 9.4.31, demonstrating a vulnerability in the web server for security testing and…

pei4an/cve-2025-28915

Exploit for CVE-2025-28915: WordPress ThemeEgg ToolKit arbitrary file upload vulnerability allowing remote Web Shell deployment. Includes…

hupe1980/cve-2021-3129

Laravel debug mode - Remote Code Execution (RCE)

babykillerblack/cve-2015-7547

glibc getaddrinfo stack-based buffer overflow

satheesh575555/external_expat_aosp10_r33_cve-2022-25236

Patched version of Expat XML parser for AOSP10, addressing CVE-2022-25236. Provides source code for vulnerability analysis and educational review of…