#1Security papers, research projects, technical references, and reproducible material for defensive or authorized analysis.
Kitploit recommended
rat5ak/cve-2026-3805-curl-smb-uafCVE-2026-3805: Use-After-Free in curl SMB connection reuse - heap info disclosure
ad3210/cve-2024-2887-reportPOC available soon
lukasz-rybak/cve-2026-23498CVE-2026-23498 - Shopware Has Improper Control of Generation of Code in Twig rendered views
ethomson/cve-2022-41032Minimal reproduction repository for CVE-2022-41032, demonstrating the vulnerability for analysis and educational purposes.
s41r4j/cve-2025-48384GIT vulnerability | Carriage Return and RCE on cloning
snailsploit/cve-2025-9776CVE-2025-9776 — CatFolders WordPress Plugin: Authenticated SQL Injection via CSV Import | POC + Walkthrough
r4bbit-r4/directus-presoPresentation about CVE-2025-55746
lycis/cawdogCAWODOG is a proof-of-concept project demonstrating how to protect Python-based AI models deployed on offline industrial machines. Across three…
cybervinner/tp-link-tl-wr820n-cve-2025-14175Responsible disclosure write-up for CVE-2025-14175 involving weak cryptographic algorithm support in the SSH server of TP-Link TL-WR820N.
vignesh-hp/lockbit-ransomware-analysisThreat intelligence and incident response case study on LockBit ransomware exploiting CVE-2023-4966 (Citrix Bleed).
snailsploit/cve-2025-12030ACF to REST API WordPress Plugin IDOR Vulnerability (CVE-2025-12030) - Security flaw allowing authenticated users with Contributor-level access to…
sid-203/enterprise-information-security-risk-assessment-oracle-e-business-suite-case-studyReal-world information security risk assessment based on the Oracle E-Business Suite zero-day (CVE-2025-61882). Analyses attacker methods, enterprise…
dantsco/cve-2025-64720-pocProof-of-concept exploit for CVE-2025-64720, a libpng buffer overflow in palette premultiplication. Includes exploit generator, test harness with…
insaida/cve-2024-0519-rca-researchCVE-2024-0519 root cause analysis
anchor0221/cve-2025-50461Technical Details and Exploit for CVE-2025-50461
tubaaiftikhar-ui/moveit-transfer-data-breach-analysis.Detailed analysis of the 2023 MOVEit Transfer data breach (CVE-2023-34362) for CS50 Cybersecurity. This project explores the technical impact of…
iamwajd/cyber-attack-analysisIn-depth case study analyzing the 2020 Virgin Mobile KSA breach via CVE-2020-0688 exploitation, packet sniffing, and patch management failures, with…
tharooon/cve-2026-29971An attacker can execute arbitrary JavaScript in the victim's browser, potentially leading to session hijacking or privilege escalation.
