CVE-2026-72898
vuxnx/cve-2026-72898Proof-of-concept exploit for CVE-2026-72898, targeting Toucan2 behavior with malformed map options to reproduce the vulnerability and validate…
vulnerability-analysisexploitationdatabase-security
Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
vuxnx/cve-2026-72898Proof-of-concept exploit for CVE-2026-72898, targeting Toucan2 behavior with malformed map options to reproduce the vulnerability and validate…
yonliud/cve-2017-7494Python exploit for CVE-2017-7494 (SambaCry) demonstrating authenticated remote code execution by uploading a malicious shared library to a Samba…
aykhan019/cve-2022-1471-jira-labOffline CVE-2022-1471 lab: SnakeYAML unsafe deserialization to RCE; compares vulnerable 1.x vs fixed 2.x using a harmless local payload.
balochkainat160-cyber/cs50-cybersecurityCS50's Introduction to Cybersecurity final project on React2Shell (CVE-2025-55182)
dinosn/cve-2026-71362-magento-labDocker lab reproducing CVE-2026-71362 Magento/Adobe Commerce account takeover via customer-session identity switch, with PoC and official-patch A/B/A…
fusiondrive/cve-2026-43499-zfold4CVE-2026-43499 research port for Galaxy Z Fold4 SM-F936W F936WVLU1AVGA (in progress)
ghostpels/cve-2026-13610Exploit PoC for unauthenticated doctor/receptionist account creation in the KiviCare WordPress plugin via improper privilege management, providing…
gogooma125732/cve-2016-5195Non-weaponized CVE-2016-5195 (Dirty COW) analysis and validation harness with root-cause research, upstream patch review, and safe lab-only PoC for…
harshiys/cve-2007-2447-exploitation-siem-detection-labIsolated AD/Linux attack lab: exploited CVE-2007-2447 via Metasploit, detected with Wazuh SIEM mapped to MITRE ATT&CK (T1190, T1059)
knowlily/cve-2026-43499-honorKernel privilege escalation research archive for CVE-2026-43499 (GhostLock) on Honor Magic6 Pro, documenting exploitation analysis, reverse…
lionels-cyber/cve-2024-45519-zimbra-real-fixZimbra CVE-2024-45519 real fix - Official patch is incomplete
mermehr/mouseserver-1.7.8.5-rcePoC exploit for CVE-2022-3218 targeting WiFi Mouse Server 1.7.8.5, achieving RCE via keystroke injection and in-memory PowerShell payload delivery…
mreza-en/cve-2021-21994_pocValidates and exploits VMware ESXi SFCB authentication bypass (CVE-2021-21994) via a probe/fuzz harness, enabling unauthenticated CIM-XML enumeration.
oguzylmzx/cve-2025-64512-pdfminer-pocPoC for CVE-2025-64512: pdfminer.six CMapDB pickle deserialization RCE via crafted PDF
ubitquity/metabase-setup-endpoint-sqli-fixFixes unauthenticated SQL injection in a setup endpoint by replacing raw JDBC queries with ORM parameterization and constant-time token validation.
ubitquity/windows-winsock-uaf-mitigationThis repository contains a conceptual patch demonstrating the mitigation for CVE-2026-68820, a critical Use-After-Free (UAF) vulnerability in the…
t-beckett/vulnbook-deletion_scheduled-85395299Offline-first vulnerability findings tracker that searches 11 CVE databases in parallel, adds EPSS/KEV enrichment, and manages coordinated disclosure…
watchtowrlabs/watchtowr-vs-citrix-netscaler-preauth-rce-cve-2026-8452Proof-of-concept exploit for Citrix NetScaler CVE-2026-8452 that verifies pre-auth RCE by building shellcode and executing commands through a…