Tools

aboutcode-org/vulnerablecode

Open-source vulnerability database aggregating CVE data from multiple sources with a web UI and API. Maps vulnerabilities to specific software…

trailofbits/cvedb

CVE querying library and utility that uses a local store syncing directly to the National Vulnerability Database

joe-desimone/mongobleed

Proof-of-concept exploit for CVE-2025-14847, a MongoDB zlib decompression vulnerability that leaks uninitialized server memory via crafted BSON…

joshuavanderpoll/cve-2025-14847

CVE-2025-14847 (MongoBleed)

cve-search/cve-search

Local CVE/CPE vulnerability database with search, ranking, web interface, and API for offline vulnerability analysis and management.

0xdeku/cve-2021-42666

CVE-2021-42666 - SQL Injection vulnerability in the Engineers online portal system.

vighneshnair7/cve-2024-51030

Proof-of-concept exploit for SQL injection in Sourcecodester Cab Management System 1.0, demonstrating arbitrary SQL execution via the id parameter in…

vighneshnair7/cve-2024-48427

Proof-of-concept for CVE-2024-48427: SQL injection in Sourcecodester Packers and Movers Management System v1.0. Exploits the id parameter to execute…

adarshthakur14777-cyber/cve-2026-60137

wpsqli full SQLi extractor + dumper for CVE-2026-60137

oiyl/cve-2025-46171

Writeup of a Denial of Service vulnerability in the vBulletin 3.8.7 friends list.

0xdeku/cve-2021-42667

CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system.

metthk/cve-2023-48084-revised

Python PoC exploiting time-based blind SQLi in Nagios XI to extract database contents, with multithreaded binary-search extraction and CLI…

sakthivel10q/cve-2025-14847

🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked…

emad-almousa/cve-2021-2175

Proof-of-concept exploit for CVE-2021-2175, an Oracle Database Vault metadata exposure vulnerability, demonstrating unauthorized access to sensitive…

againstthelight/cve-2022-37204

Proof-of-concept exploit for an authenticated SQL injection vulnerability in JFinal CMS 5.1.0, demonstrating information disclosure and potential…

akhlak2511/cve-2024-50972

Proof-of-concept for SQL injection in Itsourcecode Construction Management System 1.0, demonstrating time-based injection via borrow_id parameter and…

huangyanqwq/cve-2023-49496_poc

Proof-of-concept exploit for CVE-2023-49496, demonstrating SQL injection in UCServer via the /login/wwx_corpInfo/ endpoint to extract sensitive…

rishi-kaul/cve-2025-14847-mongobleed

Analysis and remediation guide for CVE-2025-14847 (MongoBleed), a MongoDB zlib compression memory disclosure. Includes detection indicators,…