S2-072
cuteecat/s2-072Proof-of-concept exploit for the Apache Struts JSON plugin denial-of-service vulnerability (CVE-2026-73633), demonstrating CPU and memory exhaustion…
vulnerability-analysisexploitationweb-application-exploitation
Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
cuteecat/s2-072Proof-of-concept exploit for the Apache Struts JSON plugin denial-of-service vulnerability (CVE-2026-73633), demonstrating CPU and memory exhaustion…
0xsec1/cve-2026-64600-refluxfs-pocProof-of-concept exploit for CVE-2026-64600 in RefluXFS, demonstrating the flaw and providing technical context for detection, patching, and further…
0xterror/cve-2023-22047---oracle-peoplesoft-lfiCVE-2023-22047 is a critical unauthenticated Local File Inclusion (LFI) vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit…
4minx/cve-2026-72898Proof-of-concept exploit for CVE-2026-72898, an unauthenticated SQL injection in Metabase's password-reset endpoint. Forges an admin session for full…
0xterror/cve-2023-22047-oracle-peoplesoft-lfiCVE-2023-22047 is a critical unauthenticated Local File Inclusion (LFI) vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit…
kentox493/cve-2026-46300_fragnesiaLinux kernel local privilege escalation exploit with automated prerequisite audit for CVE-2026-46300, validating patch status, XFRM ESP-in-TCP…
alixploit22/cve-2026-53587Python proof-of-concept for CVE-2026-53587, providing a focused exploit path to reproduce the vulnerability and support validation and defensive…
alixploit22/cve-2026-6440mencari sebuah kerentanan, wodpres dan mengungah shell di kerentanan wodpres tersebut
alixploit22/cvex2shelExploit for CVE-2026-64638, a pre-authentication reflected XSS in WordPress login, enabling injection of malicious JavaScript into /wp-login.php…
duyduongduyduong/cve-2021-36934-dll-hijacking-dfir-investigationDFIR investigation resources for CVE-2021-36934, covering DLL hijacking, privilege-escalation detection, and forensic analysis of affected Windows…
h4zaz/cve-2026-8793Technical CVE write-up detailing missing brute-force protection in a web admin login form, with PoC reproduction, attack-chain context, and…
h4zaz/cve-2026-8794Username Enumeration via Authentication Timing Side-Channel in PaperCut NG
hunt-benito/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-coworkPoC exploit for CVE-2026-73678: unauthenticated RCE in MindsDB Cowork via attacker-supplied LLM key and unsandboxed scratchpad exec to run OS…
kimdir01/cve-2026-9090-pocPoC for CVE-2026-9090 — Casdoor SAML signature bypass (CWE-347). Reproduction-only; coordinated via CERT/CC VU#780781.
leeyoonjoo/cve-2026-42533CVE-specific proof-of-concept written in Python for vulnerability validation and security testing.
liam-worsley/cve-2025-32433-poc-analysisThis is an analysis for CVE-2025-32433 (Erlang OTP SSH Vulnerability). I did not write any of the code, I only wrote comments describing what the…
mohaimenul370/perform-an-rdp-exploitation-using-the-bluekeep-vulnerability-cve-2019-0708-on-windowsStep-by-step demonstration of BlueKeep CVE-2019-0708 exploitation against Windows Remote Desktop Services, including RCE via crafted RDP packets and…
sanr01/cve-2021-41773-exploit-labReproduces CVE-2021-41773 path traversal in Apache HTTP Server 2.4.49, with PoC code, root-cause analysis, impact assessment, and mitigation guidance…