Tools

exploreio/cve-2026-79483-fastgpt-nosql-injection

Proof-of-concept for CVE-2026-79483, a NoSQL injection in FastGPT Community Edition allowing unauthenticated access to chat history titles. Includes…

danish1162/cve-2026-2035703-x300

Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station (CVE-2026-2035703, CWE-78, CVSS 9.8) — Coordinated Disclosure

rootdirective-sec/cve-2026-1581-analysis-lab

Reproduces CVE-2026-1581, an unauthenticated time-based SQL injection in wpForo Forum <=2.4.14, with a Docker lab and PoC to demonstrate the…

matad0r-maghribi/cve-2026-0300-panos

Security Research and Proof-of-Concept (PoC) for CVE-2026-0300 : Unauthenticated Remote Code Execution (RCE) in Palo Alto Networks PAN-OS User-ID…

sivaadityacoder/cve-2026-22038

Detailed analysis of CVE-2026-22038, a high-severity vulnerability in AutoGPT Stagehand blocks that logs API keys in plaintext, including root cause,…

sharathc213/cve-2023-7173

Proof-of-concept for CVE-2023-7173, a stored XSS in Hospital Management System 1.0, with Docker setup and reproduction steps.

menevarad007/cve-2026-37750

Reflected XSS proof-of-concept for School Management System 1.0, demonstrating unauthenticated JavaScript execution via the type parameter in…

hafizgemilang/cve-2025-56243

Advisory detailing a reflected XSS vulnerability in PuneethReddyHC Event Management System v1.0, including impact analysis, reproduction steps, and…

hafizgemilang/cve-2025-52021

Advisory and proof-of-concept for a time-based blind SQL injection vulnerability in an online shopping system, including technical details, impact…

dogukankurnaz/cve-2026-20841-poc

Proof-of-concept demonstrating command injection in Windows Notepad via crafted Markdown links, enabling remote code execution. Includes attack…

mehdi-ben-hamou/cve-2026-30498

Educational CSRF vulnerability demonstration with a controlled lab environment, including a proof-of-concept exploit and a fixed version with proper…

adityabhatt3010/cve-2026-27579-cors-misconfiguration-leading-to-authenticated-data-exposure

CVE-2026-27579 - CORS Misconfiguration – Arbitrary Origin with Credentials → Authenticated Cross-Origin Account Data Exposure

h4zaz/cve-2026-8793

esponsible disclosure write-ups for CVE-2026-8793 - PaperCut NG 25.0.11

cloud-architekt/azuread-attack-defense

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…

purp1ew0lf/blue-team-notes

You didn't think I'd go and leave the blue team out, right?

yo-yo-yo-jbo/macos_sandbox

Blog post exploring macOS App Sandbox, entitlements via codesign, and sandbox escape techniques using launchd, LaunchAgents, and quarantine…

shams-ul-mehmood/cve-2021-3156-project

Educational lab environment for CVE-2021-3156 (Baron Samedit) with a Dockerized vulnerable sudo target, exploit scaffold, canary test, root-cause…