Tools

abdul-kalam2000/retbleed-speculative-execution-poc

Reproduction of the Retbleed (CVE-2022-29900/29901) micro-architectural attack in gem5. RSB underflow, Flush+Reload side-channel leak, and a verified…

eliot-code/cve-2026-52924

Technical analysis of CVE-2026-52924, a critical use-after-free in Linux kernel SCTP stale cookie handling, including root cause, attack flow, fix,…

jelasin/cve-2026-42533

Proof-of-concept reproduction of an nginx heap overflow and info leak (CVE-2026-42533) with two attack surfaces, debug analysis, and a full RCE chain.

hunt-benito/samsung-bixby-command-execution-cve-2026-21055-improper-component-export

Proof-of-concept exploit for CVE-2026-21055 demonstrating arbitrary command execution via improperly exported Android components in Samsung Bixby.…

0xblackash/cve-2026-12485

CVE-2026-12485

horrister/beyondtrust-cve-2026-1232

Curated vulnerability research repository with in-depth writeups, proof-of-concept scripts, and IOC listings for real-world CVEs. Covers root cause…

dungsocool/cve-2017-18349

Step-by-step walkthrough of CVE-2017-18349 Fastjson deserialization RCE exploitation, covering attack surface identification, fingerprinting, JNDI…

logis11/cve-2025-55423-analysis-and-reproduction

Reproduction and analysis toolkit for CVE-2025-55423, providing exploit verification and vulnerability assessment capabilities for security…

danieltangnes/cve-2026-3888

Proof-of-concept exploit for CVE-2026-3888, written in C. Demonstrates vulnerability exploitation and binary-level attack techniques for security…

maxime288/cve-2026-8838-rce

Educational PoC for CVE-2026-8838, a critical RCE vulnerability in Amazon Redshift Python Driver via unsafe eval() in vector_in(). Includes technical…

mk017-hk/cve-2025-5548

Security research and technical analysis of CVE-2025-5548, a buffer overflow vulnerability affecting FreeFloat FTP Server 1.0. This repository…

mbanyamer/rtos-f-16-exploit---cve-2019-7711

Proof-of-concept exploit for CVE-2019-7711, a format string vulnerability in Green Hills INTEGRITY RTOS. Demonstrates a full attack chain with memory…

abdullahmaqbool22/explosive-as-hell-mcs-qualifer-web-500

[First-Blood-XO] React Server Component endpoint vulnerable to CVE-2025-55182 (RCE) → enumerated SUID binaries → /usr/bin/perl had SUID set → used…

guard-wait/cve-2025-38248_exp

C exploit for CVE-2025-38248 supporting ROP and data-only attack techniques for binary exploitation research and vulnerability verification.

0xc4r/cve-2026-21508_poc

Proof-of-concept for CVE-2026-21508, demonstrating a DLL hijacking attack on Windows 11 that escalates privileges by loading a crafted DLL into…

lakshan-sameera/cve-2025-32462-and-cve-2025-32463---critical-sudo-vulnerabilities

Proof-of-concept exploit code for critical sudo vulnerabilities CVE-2025-32462 and CVE-2025-32463, demonstrating privilege escalation attack vectors.

stp1t/cve-2025-27591

Exploit for CVE-2025-27591, a local privilege escalation in the Below service, leveraging a world-writable directory and symlink attack to modify…