CVE-2025-40778
nehkark/cve-2025-40778Proof-of-concept demonstrating DNS cache poisoning via additional record injection in BIND 9, with tools to validate and exploit CVE-2025-40778 for…
dns-analysiseducationexploitation+3
5
nehkark/cve-2025-40778Proof-of-concept demonstrating DNS cache poisoning via additional record injection in BIND 9, with tools to validate and exploit CVE-2025-40778 for…
n0n4m3x41/cve-2026-22738-pocProof-of-concept exploit for CVE-2026-22738, a critical SpEL injection RCE in Spring AI SimpleVectorStore, demonstrating unauthenticated OS command…
muhammedkayag/cve-2025-32463Proof-of-concept demonstrating a local privilege escalation in sudo (CVE-2025-32463) via chroot configuration manipulation, intended for defensive…
mrk336/inside-cve-2026-20805-how-a-windows-dwm-flaw-exposed-sensitive-dataCVE‑2026‑20805: A Windows Desktop Window Manager flaw causing local information disclosure. Requires low privileges, no user interaction. Rated CVSS…
mrk336/breaking-the-update-chain-inside-cve-2025-59287-and-the-wsus-rce-threatTechnical analysis and proof-of-concept exploit for CVE-2025-59287, a critical RCE in Windows Server Update Services via unsafe deserialization,…
min8282/cve-2026-5027Proof-of-concept exploit for CVE-2026-5027, a path traversal vulnerability in Langflow allowing arbitrary file write and potential remote code…
milot/dissecting-pkexec-cve-2021-4034Educational analysis and proof-of-concept code for CVE-2021-4034 (pkexec local privilege escalation), with detailed comments explaining the…
menevarad007/cve-2026-37750Reflected XSS proof-of-concept for School Management System 1.0, demonstrating unauthenticated JavaScript execution via the type parameter in…
mbanyamer/deephas-1.0.7-prototype-pollution-poc-cve-2026-25047-Proof-of-concept demonstrating prototype pollution in deephas <=1.0.7 (CVE-2026-25047) leading to arbitrary code execution and denial of service,…
mbanyamer/cve-2026-3395-maxsite-cms-unauthenticated-rceProof-of-concept exploit for unauthenticated remote code execution in MaxSite CMS <= 109.1 via MarkItUp editor AJAX endpoints, with detection and…
mbanyamer/cve-2026-26988-librenms-sqliProof-of-concept exploit for unauthenticated SQL injection in LibreNMS ajax_table.php, demonstrating time-based and boolean-based blind injection…
mbanyamer/cve-2026-26030-microsoft-semantic-kernel-1.39.4-rceProof-of-concept exploit for CVE-2026-26030, demonstrating remote code execution via unsafe filter expressions in Microsoft Semantic Kernel's…
mbanyamer/cve-2026-24854-churchcrm-6.7.2-authenticated-numeric-sql-injectionProof-of-concept demonstrating authenticated numeric SQL injection in ChurchCRM before 6.7.2, enabling logic manipulation to bypass WHERE clauses and…
masterwok/poc-cve-2026-33017Proof-of-concept exploit for CVE-2026-33017 (Langflow <= 1.8.1).
masterwok/poc-cve-2026-1357Proof-of-concept exploit for CVE-2026-1357, an unauthenticated arbitrary file upload in WPvivid Backup & Migration plugin for WordPress, enabling…
masterwok/poc-cve-2026-21858Proof-of-concept exploit for CVE-2026-21858 (ni8mare) impacting n8n versions < 1.121.0
maniakh/cve-2026-31431---copy-fail-pocBu depo, Linux cekirdeginde (kernel) bulunan CVE-2026-31431 (Copy Fail) zafiyetini icermektedir. Zafiyet, algif_aead modülündeki bir optimizasyon…
luiskrnr/exploit-cve-2026-23744Exploit for CVE-2026-23744, a remote code execution vulnerability in MCPJam Inspector, allowing attackers to execute arbitrary commands via crafted…