CVE_2019_2215
0xbinder/cve_2019_2215Proof-of-concept LPE exploit for Android Binder UAF that uses iovec spraying and addr_limit overwrite to achieve arbitrary kernel read/write.
android-securityprivilege-escalationvulnerability-analysis+5
1
Cybersecurity research, materials, labs, and learning paths, including CTFs and curated educational resources.
0xbinder/cve_2019_2215Proof-of-concept LPE exploit for Android Binder UAF that uses iovec spraying and addr_limit overwrite to achieve arbitrary kernel read/write.
horkimhab/cve-2024-8068-cve-2024-8069Proof-of-concept exploit scripts for CVE-2024-8068 and CVE-2024-8069, focused on authorized penetration testing, educational labs, and defensive…
superman-l/cve-2026-16723Reproduces fastjson 1.2.83 @JSONType RCE with a vulnerable Spring Boot target and ASM-based payload generator using HTTP or file protocol jar chains.
hackspeak/cve-2026-23479Redis UAF RCE PoC collection for CVE-2026-23479: safe version checker, exploit module, GDB-assisted PoC, and Sigma detection rules for authorized…
trandonga3/poc-cve-2026-63030-cve-2026-60137-Exploit chain for WordPress Core using REST API route-confusion and SQL injection for unauthenticated RCE, privilege escalation, and full server…
horkimhab/cve-2026-73072Educational security research repository for testing and learning vulnerability concepts, sandboxing, secure coding, and defensive practices in…
mattiacervelli/cve-2025-24893_analysisSelf-contained Docker lab that reproduces CVE-2025-24893, an unauthenticated SSTI-to-RCE in XWiki SolrSearch, and compares vulnerable vs patched…
anirbala98/cve-2026-539594gaBoards < 3.3.9 - User Information Disclosure
bebarossi/grav-cve-2024-28116Analysis and Docker reproduction of CVE-2024-28116 - SSTI with sandbox bypass in Grav CMS
mthamil107/db_audit_researchSelf-Defeating Audits: reproducible lab showing a low-privilege PostgreSQL role reversibly blinding a trigger-based auditor + poisoning attribution…
stefanotractor/activemq-cve-2023-46604-labHands-on lab for exploiting Apache ActiveMQ CVE-2023-46604 remote code execution, with Python-based tooling and a vulnerable environment setup.
artwiderobo/cve-2026-13934Structured vulnerability research repo for a Chrome Dawn WebGPU CWE-20 flaw: root cause, patch diff, static verification, severity review, and…
hackspeak/cve-2026-14669Proof-of-concept exploit for CVE-2026-14669, a PostgreSQL to_char() timezone abbreviation heap buffer overflow enabling RCE through information leak…
velessecurity/cve-2021-1675-printnightmare-analysisTechnical write-up and analysis of PrintNightmare (CVE-2021-1675 / CVE-2021-34527), covering RCE/LPE exploitation, detection via Windows event logs,…
camillegr/cve-2026-73292Proof-of-concept exploit for CVE-2026-73292: CSRF attack on Semaphore UI password change endpoint, serving a malicious page that silently resets an…
ilhomjonr/cve-2026-70376Advisory and Python PoC for Pluck CMS CSRF: fail-open Referer check plus double-extension upload enables webshell deployment and remote code…
alkimcoskun/cve-2025-69848-security-advisoriesSecurity advisory for CVE-2025-69848 – Reflected XSS in NetBox ProtectedError handling
horkimhab/cve-2026-18504-cve-2026-16732Educational repository for documenting and testing CVE proof-of-concept exploits inside isolated labs, virtual machines, and authorized penetration…