1day-archive
1dayexploit/1day-archiveTechnical deep-dives and root cause analyses of recently disclosed CVEs - reverse engineering patches, building proof-of-concepts, and documenting…
binary-analysiscurated-resourceseducation+5
29
1dayexploit/1day-archiveTechnical deep-dives and root cause analyses of recently disclosed CVEs - reverse engineering patches, building proof-of-concepts, and documenting…
tothi/pwn-hisilicon-dvrProof-of-concept exploit and vulnerability disclosure for HiSilicon hi3520d DVR/NVR devices. Demonstrates RCE via web interface, backdoor…
synacktiv/mojarragadgetProof-of-concept exploit for a Java gadget chain in the Mojarra library, demonstrating deserialization vulnerability exploitation for versions 2.3…
0xjohnnydev/webkit-navigationapi-sop-bypassWebKit NavigateEvent.canIntercept SOP bypass via cross-port interception — iOS 26.3.1 BSI (CVE-2026-20643)
skrkcb2/cve-2025-0851Proof-of-concept exploit for CVE-2025-0851, a file traversal vulnerability in Deep Java Library's tar/zip model extraction utility, enabling…
oxfemale/cve-2020-15999Proof-of-concept exploit for CVE-2020-15999, a heap-buffer-overflow in Chrome's FreeType font rendering via crafted SBIX table, with ASAN crash…
tuo4n8/cve-2020-2950Proof-of-concept exploit for CVE-2020-2950, demonstrating AMF deserialization to Java deserialization in Oracle Business Intelligence, with debug…
sandi-go/ps-2017-13---cve-2018-9950Proof-of-concept for CVE-2018-9950, an out-of-bounds read vulnerability in Foxit Reader/PhantomPDF leading to information disclosure and potential…
redfox-security/hacking-electron-apps-cve-2020-35717-Exploit for CVE-2020-35717 targeting Electron applications, demonstrating a specific vulnerability and providing a proof-of-concept for security…
l41kaa/cve-2024-48705Post-authentication command injection exploit for Wavlink AC1200 routers. Leverages improper input sanitization in adm.cgi to execute arbitrary shell…
stationedk-06/darksword_analysisStatic analysis of the DarkSword iOS WebKit exploit chain — delivery, staging, and CVE breakdown (CVE-2025-31277, CVE-2025-43529)
k0n9-log/cve-2025-60854Technical analysis and proof-of-concept exploit for a command injection vulnerability (CVE-2025-60854) in D-Link AX1500 routers, enabling…
mohitsinghpapola/cve-2023-20052Fixed Docker build for CVE-2023-20052 ClamAV XXE exploit. Resolves OpenSSL 3.0 compilation errors using Ubuntu 18.04 with OpenSSL 1.0 for…
mracumen/cve-2021-40444Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit
v3cn4x00/poc-cve-2025-66034Automated exploit for CVE-2025-66034, chaining path traversal and XML injection in fontTools varLib to achieve unauthenticated remote code execution…
0x4m4/hexstrike-aiMCP server enabling AI agents to autonomously execute 150+ cybersecurity tools for automated penetration testing, vulnerability discovery, bug bounty…
ed1s0nz/cyberstrikeaiAI-native security testing platform integrating 100+ tools with agentic orchestration, role-based testing, MCP-native tools, C2 capabilities, and…
elder-plinius/t3mp3stautonomous red teaming platform; multi-agent offensive-security meta-harness