Tools

forse01/cve-2019-5413-netbeans

Proof-of-concept exploit for CVE-2019-5413 targeting NetBeans IDE, demonstrating remote code execution via crafted project files.

drkbcn/lblfixer_cve_2023_30839

PrestaShop <1.7.8.9 Fix for CVE-2023-30839 and CVE-2023-30545

uthrasri/jetty-9.4.31.v20200723_cve-2023-26049

Exploit code and analysis for CVE-2023-26049 targeting Jetty 9.4.31, demonstrating a vulnerability in the web server for security testing and…

satheesh575555/external_expat_aosp10_r33_cve-2022-25236

Patched version of Expat XML parser for AOSP10, addressing CVE-2022-25236. Provides source code for vulnerability analysis and educational review of…

shoucheng3/jenkinsci__script-security-plugin_cve-2023-24422_1228.vd93135a_2fb_25

Jenkins plugin providing script approval workflows and Groovy sandboxing to enforce secure script execution, with ACL-aware permission checks and…

jack0we/cve-2024-6387

Proof-of-concept exploit for CVE-2024-6387, a remote code execution vulnerability in OpenSSH server, demonstrating exploitation techniques for…

logsec/cve-2010-2387

Proof-of-concept exploit for CVE-2010-2387, a privilege escalation vulnerability in GNOME Display Manager (GDM). Includes C source code targeting the…

epicosy/xstream-1

Java library for XML serialization and deserialization, with a focus on CVE-2020-26217 exploitation. Enables converting Java objects to XML and back,…

arntsonl/cve-2016-4463

Proof of concept for CVE-2016-4463

zunak/cve-2024-22640

Proof-of-concept exploit for CVE-2024-22640, a ReDoS vulnerability in TCPDF <=6.7.4 triggered by crafted HTML color input, with demonstration code.

trinadh465/platform_external_libvpx_v1.4.0_cve-2023-5217

C library for VP8/VP9 video encoding and decoding, with a focus on security patching for CVE-2023-5217.

cuijiung/xstream-cve-2020-26259

Exploit for CVE-2020-26259, a deserialization vulnerability in XStream, enabling remote code execution via crafted XML input.

hozyx/log4shell

Applications that are vulnerable to the log4j CVE-2021-44228/45046 issue may be detectable by scanning jar, war, ear, zip files to search for the…

g-u-i-d/cve-2024-10449-patch

Patch for CVE-2024-10449: replaces vulnerable loginAction.php with a hardened version that requires database configuration for secure authentication.

trinadh465/platform_external_libvpx_v1.8.0_cve-2023-5217

Patched libvpx codebase addressing CVE-2023-5217 with sanitizer support and cross-platform build configurations for secure VP8/VP9 encoding.

shaikusaf/external_expact_aosp10_r33_cve-2022-25314

C library for parsing XML, providing stream-oriented parsing with handler registration, supporting UTF-16 encoding, and including a reference manual.

shoucheng3/xwiki__xwiki-commons_cve-2023-29201_14-5

Technical libraries for XWiki projects, providing reusable components for vulnerability analysis, code analysis, and static analysis across…

cuijiung/jackson-cve-2020-36180

Proof-of-concept exploit for CVE-2020-36180, a Jackson-databind deserialization vulnerability enabling remote code execution via crafted JSON…