#1Security papers, research projects, technical references, and reproducible material for defensive or authorized analysis.
Kitploit recommended
rooobeam/pickle-deserialization-exploit-in-transformersThis study analyzes Python pickle deserialization vulnerabilities, focusing on CVE-2024-3568 in Hugging Face Transformers' TFAutoModel. We reproduce…
cainsoulless/cve-2024-28784Technical disclosure for CVE-2024-28784 — a stored XSS vulnerability in IBM QRadar SIEM 7.5.0 UpdatePackage 7. The issue affects the Rule Wizard…
userr404/cve-2025-56605Proof-of-concept for a reflected XSS vulnerability in Event Management System 1.0, demonstrating improper input validation in register.php and…
tansique-17/cve-2025-61456Public disclosure and proof-of-concept for a reflected XSS vulnerability (CVE-2025-61456) in an e-commerce project, including technical details, CVSS…
wildwestcybersecurity/cve-2019-13288Replicated using afl fuzzer instrumentation! Shoutz to antonio-morales.
knqyf263/cve-2018-11235Proof-of-concept exploit for CVE-2018-11235, a remote code execution vulnerability in Git submodules. Includes Dockerfile for reproducible testing…
jeromeyoung/cve-2021-43141Information about CVE-2021-43141, a reflected XSS in the plan_application section.
afine-com/cve-2023-39062Spipu Html2Pdf < 5.2.8 - XSS vulnerabilities in example files
amaljafarzade/cve-2025-61319Stored XSS in ReNgine <= 2.2.0 — public disclosure
moalali/cve-2025-56379A stored cross-site scripting (XSS) vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to execute arbitrary web scripts or…
tansique-17/cve-2025-61454Public disclosure and proof-of-concept for CVE-2025-61454, a reflected XSS vulnerability in E-commerce Project v1.0's search.php, including…
ish2yu/cve-2025-55780Null Pointer Dereference in MuPDF , First CVE discovered by me
tansique-17/cve-2025-51411Public Disclosure
sandi-go/cve-2019-0678Microsoft Edge Elevation of Privilege Vulnerability
wrathfuldiety/cve-2025-56311CSRF vulnerability in FD602GW-DX-R410 router allows remote attackers to reboot the device via a crafted POST request to /boaform/admin/formReboot…
goldenticketlabs/cve-2025-55349repo for CVE-2025-55349
shinycolumn/cve-2025-50944Improper Certificate Chain Validation in EagleEyes Lite Android Application
openxp-research/cve-2022-293802022-29380
