CVE-2025-6934
rosemary1337/cve-2025-6934Automated PoC exploit for WordPress Opal Estate Pro that detects vulnerable versions, retrieves nonce, and creates unauthorized administrator…
vulnerability-analysisexploitationweb-application-exploitation+3
Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
rosemary1337/cve-2025-6934Automated PoC exploit for WordPress Opal Estate Pro that detects vulnerable versions, retrieves nonce, and creates unauthorized administrator…
bsdrip/cve-2026-40179-pocMinimal Python PoC for CVE-2026-40179: injects a malicious metric name via unauthenticated Prometheus remote_write to trigger stored XSS in the web…
jelasin/cve-2026-41089Pre-auth PoC for CVE-2026-41089 Netlogon CLDAP stack overflow via UDP/389, triggering LSASS crash/DC reboot. Includes exploit script, root-cause…
open-flaw/cve-2026-56848Exploit PoC for CVE-2026-56848, a Node.js HTTP/2 heap-use-after-free that allows remote unauthenticated DoS. Includes raw-socket trigger, ASan build…
realstatus/cve-2026-47858Proof-of-concept exploit for unauthenticated JMX RCE in Spring Tools live information mode, using MLet remote class loading to execute arbitrary…
renzi25031469/cve-2026-19478Detects CVE-2026-19478 in GitLab CE/EE with a non-destructive Nuclei template that triggers the GraphQL fallback-field method invocation via touch…
stefanotractor/activemq-cve-2023-46604-labHands-on lab for exploiting Apache ActiveMQ CVE-2023-46604 remote code execution, with Python-based tooling and a vulnerable environment setup.
artwiderobo/cve-2026-13934Structured vulnerability research repo for a Chrome Dawn WebGPU CWE-20 flaw: root cause, patch diff, static verification, severity review, and…
kaleth4/cve-2026-64638Technical analysis and defensive mitigation for a WordPress Core pre-auth XSS-to-RCE chain, including sanitizer bypass, DOM clobbering, JSONP abuse,…
velessecurity/cve-2020-14882-weblogic-analysisTechnical analysis and clean Java Thread Echo PoC for Oracle WebLogic Server vulnerability chain.
qianlijaingshan/fastgpt-sandbox-auditFastGPT Python sandbox escape chain audit tool (CVE-2026-32128 related, v4.14.8 inspect chain)
hackspeak/cve-2026-14669Proof-of-concept exploit for CVE-2026-14669, a PostgreSQL to_char() timezone abbreviation heap buffer overflow enabling RCE through information leak…
velessecurity/cve-2021-1675-printnightmare-analysisTechnical write-up and analysis of PrintNightmare (CVE-2021-1675 / CVE-2021-34527), covering RCE/LPE exploitation, detection via Windows event logs,…
1neptune/shieldbreakWindows Defender 0day proof-of-concept demonstrating a patch bypass for CVE-2026-69414, targeting Windows 11 25H2 and Server 2025 to evade endpoint…
camillegr/cve-2026-73292Proof-of-concept exploit for CVE-2026-73292: CSRF attack on Semaphore UI password change endpoint, serving a malicious page that silently resets an…
ihsspotlight/heartbleed-cve-2014-0160--scripts-python3Python scripts for detecting and exploiting OpenSSL Heartbleed (CVE-2014-0160), leaking sensitive memory contents from vulnerable TLS services.
ilhomjonr/cve-2026-70376Advisory and Python PoC for Pluck CMS CSRF: fail-open Referer check plus double-extension upload enables webshell deployment and remote code…
alkimcoskun/cve-2025-69848-security-advisoriesSecurity advisory for CVE-2025-69848 – Reflected XSS in NetBox ProtectedError handling