ashiqrehan-21/mcp-inspector-cve-2025-49596MCP-Inspector-vulncheck is a Python script that checks if an MCP Inspector server is vulnerable to CVE-2025-49596. It tests whether the /sse endpoint…
waburig/open-worldwide-application-security-project-owasp-Automated Web Vulnerability Assessment of DVWA using OWASP ZAP to identify and analyze critical security flaws like Remote Code Execution…
owasp/dvsaa Damn Vulnerable Serverless Application
theronielanddaronpodcastshow/svjaThe Super Vulnerable Java Application (SVJA), as demonstrated in the Roniel and DaRon Podcast Show, is an Apache Struts application designed to…
oscerd/cve-2026-46592Reproducer for CVE-2026-46592: Apache Camel camel-cxf operationName header injection redirecting the invoked SOAP operation (confused deputy) from a…
loaxert/cve-2025-59528-pocPoC for CVE-2025-59528 used to achieve remote code execution on the Silentium machine at HTB
curtail-inc/hello-regrade-securityFind the vulnerability your tests were never written to catch. A ReGrade demo modeling CVE-2023-5968: catch a password-hash leak by comparing an app…
learner202649/cve-2025-45809-pocTime-based blind SQL injection proof-of-concept for LiteLLM v1.65.4. Exploits the `/key/block` endpoint to extract database contents and read server…
filipegaudard/cve-2026-24134-pocProof-of-concept exploit for CVE-2026-24134, a Broken Object Level Authorization vulnerability in StudioCMS, demonstrating unauthorized access to…
sharma19d/cve-2025-61148The vulnerability exists in the Student Payment API. The application fails to properly validate whether the user requesting a receipt is authorized…
fuyuooumi1027/cve-2023-45857-demoInteractive demo for CVE-2023-45857 (axios XSRF token bypass). Step-by-step guide to reproduce the vulnerability in a controlled dev container…
nxploited/cve-2024-9707-poche Hunk Companion Plugin for WordPress: Vulnerable to Unauthorized Plugin Installation/Activation (Versions Up to and Including 1.8.4)
payatu/tiredful-apiAn intentionally designed broken web application based on REST API.
portswigger/burp-extensions-montoya-api-examplesSample Burp Suite extensions demonstrating the Montoya API, covering HTTP and proxy handlers, custom scan checks, Intruder payloads, WebSocket…
kpomin57/waf-testerA program for testing WAF functionality
richard-natan/poc-cve-2025-63406Proof-of-concept for CVE-2025-63406 in GroupOffice, demonstrating API-based object manipulation and authentication flow for vulnerability analysis…
oscerd/cve-2026-46587Reproducer for CVE-2026-46587: Apache Camel camel-couchbase CCB_* header injection enabling document disclosure, tampering, and TTL-forced data…
oscerd/cve-2026-46588Reproducer for CVE-2026-46588: Apache Camel camel-couchdb CouchDb* header injection (operation confusion) subverting a write-only endpoint into read…
