Tools

uthrasri/jetty-9.4.31.v20200723_cve-2023-26049

Exploit code and analysis for CVE-2023-26049 targeting Jetty 9.4.31, demonstrating a vulnerability in the web server for security testing and…

rvermeulen/apache-struts-cve-2017-9805

Exploit for Apache Struts CVE-2017-9805, a remote code execution vulnerability in the REST plugin. Enables penetration testing and security…

ssst0n3/cve-2021-31856

Detailed CVE-2021-31856 report with PoC and code analysis for a SQL injection vulnerability in Meshery's pattern file API, enabling unauthenticated…

okanulkr/curveball-cve-2020-0601-poc

Proof-of-concept exploit for CVE-2020-0601 (CurveBall) demonstrating ECC certificate validation bypass to spoof trusted CA and sign arbitrary…

compliancecontrol/cve-2024-56115

CVE-2024-56115 proof-of-concept for Amiro.CMS XSS and OS command injection vulnerabilities, enabling security researchers to test and validate…

trinadh465/external_expat-2.1.0_cve-2022-25313

Repository dedicated to CVE-2022-25313, a vulnerability in Expat 2.1.0, providing analysis and potential exploitation code.

r00t4dm/jenkins-cve-2016-9299

Exploit for Jenkins CVE-2016-9299, a remote code execution vulnerability in the Jenkins CLI. Provides proof-of-concept code for security testing and…

randomrobbiebf/cve-2025-22777

GiveWP – Donation Plugin and Fundraising Platform <= 3.19.3 - Unauthenticated PHP Object Injection

infosecjack/cve-2018-6574

Go-based proof-of-concept exploit for CVE-2018-6574, demonstrating directory traversal in Go's net/http package for security testing and…

am6539/cve-2019-3396

Exploit for CVE-2019-3396, a path traversal and RCE vulnerability in Confluence Server, enabling unauthorized file read and remote code execution.

buraksevben/cve-2024-24140

Proof-of-concept exploit demonstrating SQL injection in the Daily Habit Tracker App, enabling unauthorized database access and data extraction.

sahar042/cve-2024-1207

The WP Booking Calendar plugin for WordPress is vulnerable to SQL Injection via the 'calendar_request_params[dates_ddmmyy_csv]' parameter in all…

0xr1l3s/cve-2022-22965

Spring4Shell is a critical RCE vulnerability in the Java Spring Framework and is one of three related vulnerabilities published on March 30

trinadh465/platform_external_libvpx_v1.4.0_cve-2023-5217

C library for VP8/VP9 video encoding and decoding, with a focus on security patching for CVE-2023-5217.

glasses618/cve-2020-15169

Ruby-based exploit for CVE-2020-15169, demonstrating a specific web application vulnerability with proof-of-concept code for security testing and…

buraksevben/cve-2024-24138

Proof-of-concept exploit for SQL injection vulnerability in Online Timesheet App, demonstrating the attack and providing technical details for…

buraksevben/cve-2024-24141

Proof of concept for SQL injection vulnerability in School Task Manager System, demonstrating exploitation and providing technical details for…

dshankle/vlc_cve-2021-25804_analysis

In-depth technical analysis of CVE-2021-25804, a VLC AVI parser vulnerability. Includes root cause, patch diff, and exploitation primitives for…