HttpRemotingObjRefLeak
codewhitesec/httpremotingobjrefleakAdditional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)
code-analysisexploitationpayload-development+4
92
codewhitesec/httpremotingobjrefleakAdditional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)
kuron3k0/spring-data-mongodb-exampleDockerized PoC environment for CVE-2022-22980 (Spring Data MongoDB SpEL injection) with a working exploit demonstrating remote code execution via…
p0in7s/cve-2024-38475Proof-of-concept exploit for CVE-2024-38475 targeting Apache HTTP Server mod_rewrite improper escaping, enabling URL-to-filesystem mapping for code…
verylazytech/cve-2025-3248Proof-of-concept exploit for CVE-2025-3248, a remote code injection vulnerability in Langflow prior to 1.3.0. Sends crafted HTTP requests to execute…
webr0ck/poc-cve-2018-1273Proof-of-concept exploit for CVE-2018-1273, a Spring Data Commons property binder vulnerability leading to remote code execution via crafted HTTP…
0x00phantom-hat/cve-2026-5029-exploitProof-of-concept exploit for CVE-2026-5029, delivering unauthenticated remote code execution via the run-code MCP tool on exposed HTTP endpoints.…
oscerd/cve-2026-49098PoC reproducer for CVE-2026-49098 (Apache Camel camel-kafka): the non-Camel-prefixed kafka.OVERRIDE_TOPIC header escapes the upstream HTTP header…
oscerd/cve-2026-49097PoC reproducer for CVE-2026-49097 (Apache Camel camel-irc): the non-Camel-prefixed irc.sendTo header escapes the HTTP header filter and overrides the…
biitts/cve-2026-44789-n8n-prototypepollution-rceCVE-2026-44789 — n8n <1.123.43 HTTP Request pagination prototype pollution to RCE (NODE_OPTIONS runner-spawn gadget). Lab + automated PoC, verified…
oscerd/cve-2026-40859Reproducer for CVE-2026-40859 — Apache Camel camel-netty-http / camel-vertx-http producer-side unsafe deserialization of HTTP response bodies (RCE)
theopaid/cve-2026-66753-http-header-injection-via-unvalidated-cr-and-lf-in-header-values-tiny_http-Security Advisory: HTTP Header Injection via Unvalidated CR and LF in Header Values (tiny_http)
theopaid/cve-2026-66746-http-response-splitting-via-unvalidated-response-header-values-rouille-Security Advisory: HTTP Response Splitting via Unvalidated Response Header Values (rouille)
kunalkhandelwal-dev/cve-2021-41773-source-code-analysisA Python-based static patch analysis tool for studying the root cause and remediation of CVE-2021-41773 (Apache HTTP Server Path Traversal) by…
oways/react2shell-cve-2025-55182-checkerPassive CVE-2025-55182 detection tool for vulnerable React Server Components. Scans package.json, JavaScript bundles, HTTP headers, and API endpoints…
davidxbors/cve-2025-25014Proof-of-concept exploit for CVE-2025-25014: Prototype pollution in Kibana enabling arbitrary code execution via crafted HTTP requests to ML and…
renio-wow/cve-2026-51416Analyzes a specific CVE in WeChat OAuth handler, identifying unbounded HTTP response reads leading to denial of service, with remediation guidance.
d0rb/cve-2024-4323Critical heap buffer overflow vulnerability in the handle_trace_request and parse_trace_request functions of the Fluent Bit HTTP server.
c4mx/cve-2022-22965_pocProof-of-concept exploit for CVE-2022-22965 (Spring4Shell) targeting Java Spring Framework applications via crafted HTTP requests.