#1Security papers, research projects, technical references, and reproducible material for defensive or authorized analysis.
Kitploit recommended
chamsbouzaiene/ai-vuln-rediscovery-nginx-cve-2026-42945Reproducible AI-assisted vulnerability rediscovery of CVE-2026-42945 in nginx, including technical analysis, PoC trigger, and patch validation for…
gurjotexpert/ritecmsCROSS SITE SCRIPTING
0xmrma/cve-2026-33936Denial of Service vulnerability in ecdsa (PyPI)
yeonnic/look-at-the-xnu-through-a-tube-cve-2018-4242-write-up-translation-Detailed technical write-up and translation of CVE-2018-4242, an XNU kernel vulnerability in AppleHV, with PoC code, reverse engineering analysis,…
nexxus67/cve-2026-25676Research and proof-of-concept for CVE-2026-25676, a DLL search path hijacking vulnerability in M-Track Duo HD installer, including root cause…
karlemilnikka/cve-2024-0710Unauthenticated Form Submission Unique ID Modification
itsismarcos/bot-exploit-cve-2025-55182Educational scanner for CVE-2025-55182 (React2Shell) vulnerability detection in React Server Components/Next.js apps. Uses dorks for target discovery…
secmuzz/cve-2025-25612CVE-2025-25612
sealpapapa/springcloudfunction-researchCVE-2022-22963 research
hffaust/cve-2021-42574_and_cve-2021-42694Demonstration and documentation of CVE-2021-42574 and CVE-2021-42694, Unicode bidirectional algorithm vulnerabilities enabling invisible source code…
vulnmachines/cve-2021-22053CVE-2021-22053: Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability
woorifisa-service-dev-6th/tech-seminar-react2shell[우리 FISA] 기술 세미나 우승 - 클라우드 서비스 개발 6기 3팀 - React2Shell (CVE-2025-55182) 분석 및 연구
trailofbits/break-golfCryptanalysis golf: break schemes and prove it in Lean 4. Proof-of-concept board.
opposum0112/cusimanseComposable research-contract and YAML-recipe framework for agent-operated security experiments on disposable compute
eddieoz/dual-ec-drbgEducational Jupyter notebook demonstrating the Dual_EC_DRBG cryptographic backdoor (CVE-2014-8610) with NIST P-256 state recovery attack, historical…
heshi906/cve-2024-28515Documentation of CVE-2024-28515, a buffer overflow vulnerability in CSAPP Lab3 (buflab-update.pl), enabling remote code execution via crafted URL…
snorlyd/https-nj.gov---cve-2018-14040Vulnearability Report of the New Jersey official site
comerc/cve-2025-68664Detailed disclosure of CVE-2025-68664, a critical deserialization vulnerability in LangChain core allowing secret exfiltration and potential RCE via…
