CVE-2026-64849
biutrap/cve-2026-64849Proof-of-concept exploit for CVE-2026-64849: triggers SSRF in MLflow webhook API via crafted POST, fetching cloud instance metadata from…
vulnerability-analysisexploitationweb-application-exploitation+4
Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
biutrap/cve-2026-64849Proof-of-concept exploit for CVE-2026-64849: triggers SSRF in MLflow webhook API via crafted POST, fetching cloud instance metadata from…
horkimhab/cve-2024-8068-cve-2024-8069Proof-of-concept exploit scripts for CVE-2024-8068 and CVE-2024-8069, focused on authorized penetration testing, educational labs, and defensive…
deadexpl0it/cve-2026-19598-pocProof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9.
reaizuguo/vivo_iqoo_neo_9_root_research_on_cve-2025-21479iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** — 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案
superman-l/cve-2026-16723Reproduces fastjson 1.2.83 @JSONType RCE with a vulnerable Spring Boot target and ASM-based payload generator using HTTP or file protocol jar chains.
hackspeak/cve-2026-23479Redis UAF RCE PoC collection for CVE-2026-23479: safe version checker, exploit module, GDB-assisted PoC, and Sigma detection rules for authorized…
xiaobailovesstirring/ghostlock-customGhostLock (CVE-2026-43499) adaptation for non-Android Linux 6.x ARM64
hackspeak/cve-2026-53365Local privilege escalation exploit targeting a Linux kernel io_uring AF_VSOCK reference-count bug, using page-cache manipulation to overwrite…
trandonga3/poc-cve-2026-63030-cve-2026-60137-Exploit chain for WordPress Core using REST API route-confusion and SQL injection for unauthenticated RCE, privilege escalation, and full server…
xrzcc/s26-m1q-ghostlock-selinuxGhostLock CVE-2026-43499 research for Galaxy S26 (SM-S942U1/m1q): SELinux Permissive achieved, KASLR + tracefs port, uid=0 boundary documented
horkimhab/cve-2026-73072Educational security research repository for testing and learning vulnerability concepts, sandboxing, secure coding, and defensive practices in…
turtlearm/ksmbraceksmbd CVEs: CVE-2026-31717, CVE-2026-68083
vedantk6403/koobe-guardLinux kernel module using Kprobes to detect and neutralize CVE-2024-1086 heap double-free exploits via temporal gap tracking and active register…
mattiacervelli/cve-2025-24893_analysisSelf-contained Docker lab that reproduces CVE-2025-24893, an unauthenticated SSTI-to-RCE in XWiki SolrSearch, and compares vulnerable vs patched…
anirbala98/cve-2026-539594gaBoards < 3.3.9 - User Information Disclosure
rosemary1337/cve-2025-24799Exploits GLPI CVE-2025-24799 via unauthenticated time-based blind SQL injection to extract usernames and password hashes from glpi_users for…
bebarossi/grav-cve-2024-28116Analysis and Docker reproduction of CVE-2024-28116 - SSTI with sandbox bypass in Grav CMS
rosemary1337/cve-2025-6934Automated PoC exploit for WordPress Opal Estate Pro that detects vulnerable versions, retrieves nonce, and creates unauthorized administrator…