#1Security papers, research projects, technical references, and reproducible material for defensive or authorized analysis.
Kitploit recommended

CVE-2018-7197 Write up
Exploit en Python diseñado para aprovechar la vulnerabilidad de elevación de privilegios CVE-2024-30085

This tool demonstrates the application of fundamental physics discoveries to cybersecurity.

Advisory for thumbler

Advisory for node-tesseract-ocr ⌯⌲ 50 000 weekly downloads

Technical write-up and PoC for CVE-2026-24009, demonstrating unsafe YAML loading in docling-core and practical mitigation paths.

Deep dive into a critical SQL injection in Python's Ormar ORM — reproduction, fix, and tests

Stored Cross-Site Scripting (XSS) vulnerability affecting the recipe creation functionality in Mealie versions up to 3.0.1.

📄Official disclosure of CVE-2022-4556 — Stored Cross-Site Scripting (XSS) vulnerability in SOGo Webmail v5.7.1, discovered by Ashkan Rafiee and…

Vulnerability disclosure with PoCs for three critical Termius macOS flaws: Remote Code Execution via exposed Node modules, Local Privilege Escalation…

More exploit-focused; great for security research repos.

Reflected XSS in 1000projects Book Management System 1.0

CVE-2025-57298 Disclosure.

Demonstrates and explores CVE-2018-20225, providing a proof-of-concept to understand and test the vulnerability.

Detailed analysis of CVE-2024-28397, a sandbox escape vulnerability in js2py enabling RCE via Python object traversal. Includes code analysis, PoC,…

Educational proof-of-concept for CVE-2026-6227, an authenticated Local File Inclusion in BackWPup WordPress plugin, including root cause analysis,…

CVE-2018-6791 Troubleshooting

Stored Cross-site Scripting (XSS) in leave comment functionality in Amasty Blog Pro for Magento 2