shoucheng3/spring-cloud__spring-cloud-config_cve-2020-5410_2-1-8-releaseCentralized configuration server for distributed systems with HTTP API, Git-backed storage, property encryption/decryption, and integration with…
shoucheng3/spring-cloud__spring-cloud-config_cve-2020-5405_2-1-6-releaseCentralized configuration server for distributed systems with HTTP API, encryption/decryption of properties, and support for Git, Vault, JDBC, and…
shoucheng3/spring-cloud__spring-cloud-gateway_cve-2022-22947_3-0-6Spring Cloud Gateway repository demonstrating CVE-2022-22947 exploitation for API security testing and vulnerability analysis.
saykino/cve-2025-56223Documentation of CVE-2025-56223, a denial-of-service vulnerability in Ascertia SigningHub's Upload Document API, allowing unrestricted file uploads…
saykino/cve-2025-66838Documentation of CVE-2025-66838: a rate-limiting vulnerability in ARIS file upload API allowing authenticated remote attackers to cause denial of…
the404hacking/windows-python-ratA New Microsoft Windows Remote Administrator Tool [RAT] with Python by Sir.4m1R.
ronamosa/cve-2026-18953PoC for CVE-2026-18953 — arbitrary file write (CWE-22) in awslabs.aws-transform-mcp-server's get_resource tool via the savePath parameter
crowdstrike/crowdfmsCrowdStrike Feed Management System. CrowdFMS is a framework for automating collection and processing of samples from VirusTotal, by leveraging the…
jricramc/aigateAI Prompt Secret Scanner: local proxy and Claude Code hook that blocks secrets before they reach AI APIs
elevenpaths/diario-commandline-toolsCLI client for bulk DIARIO API consumption: upload PDF/Office documents, query file hashes, and automate malware analysis workflows via command-line…
sudo-wp/sudowp-dropzone-elementorSecure fork of Startklar Elementor Addons. Patched CVE-2024-5153 & File Upload vulnerabilities.
murataydemir/cve-2020-17518[CVE-2020-17518] Apache Flink RESTful API Arbitrary File Upload via Directory Traversal
nel-droid/cve-2026-72585-pocPoC: Grafana Editor role deletes protected contact points (CVE-2026-72585, Medium 6.5)
kit-lang/packages/kit-oauthOAuth 2.0 client library for Kit applications supporting authorization code, PKCE, client credentials, and refresh token flows with built-in provider…
roxanne_ardary/nullifyAutomated, policy-driven data retention and deletion system with immutable audit trails, RBAC/ABAC, multi-jurisdiction compliance, and AI/ML…
pompelmi/pompelmiClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or…
nel-droid/cve-2026-71203-pocPoC: changedetection.io unauthenticated OpenAPI schema disclosure (CVE-2026-71203, Medium 5.3)
