CVE-2025-5880
ac8999/cve-2025-5880PoC for a Path Traversal vulnerability in Whistle v2.9.98 via the /cgi-bin/sessions/get-temp-file endpoint. (Unpatched)
exploitationvulnerability-analysisweb-application-exploitation
ac8999/cve-2025-5880PoC for a Path Traversal vulnerability in Whistle v2.9.98 via the /cgi-bin/sessions/get-temp-file endpoint. (Unpatched)
george0papasotiriou/cve-2026-11114-node.js-vm-sandbox-escape-via-proxyPoC exploit for CVE-2026-11114 demonstrating Node.js vm sandbox escape via Proxy to achieve remote code execution against a vulnerable HTTP /eval…
george0papasotiriou/cve-2026-23002-5g-nas-message-buffer-overflow-in-gnodebSimulated 5G gNodeB NAS parser with stack buffer overflow PoC for CVE-2026-23002; a crafted NAS message triggers remote code execution.
shinthink/cve-2026-66066Exploit for CVE-2026-66066 against Rails Active Storage/libvips: pre-auth arbitrary file read to recover SECRET_KEY_BASE and achieve RCE, with…
george0papasotiriou/cve-2026-22012-diameter-protocol-credit-control-bypass-in-5gPython simulation of CVE-2026-22012, showing how a missing Final-Unit-Indication in Diameter Credit-Control allows unlimited quota and service bypass…
hackspeak/cve-2026-66066PoC exploit for Rails Active Storage/libvips CVE-2026-66066: uses crafted MAT/HDF5 files for arbitrary file read, recovers secret_key_base, and…
george0papasotiriou/cve-2026-22019-libcurl-http-2-connect-tunnel-mixupSimulates CVE-2026-22019, a libcurl HTTP/2 CONNECT tunnel stream-isolation failure, demonstrating cross-stream data injection and response smuggling…
george0papasotiriou/cve-2026-0101-ble-address-spoofing-via-weak-resolvable-private-addressPython PoC for CVE-2026-0101 demonstrating BLE address spoofing via replay of a captured Resolvable Private Address to impersonate a trusted…
george0papasotiriou/cve-2026-6060-quic-handshake-amplification-via-address-validation-bypassEducational Python PoC for a QUIC address-validation bypass that triggers handshake amplification, including vulnerable server simulation and attack…
0xsha/kindarails2shellSingle-file PoC for Rails CVE-2026-66066: arbitrary file read, secret recovery, threaded scanning, and conditional RCE via signed image variations.
zer0sumgam3/cve-2026-66066-pocReproducible lab for CVE-2026-66066: file-read-to-RCE exploit chain via Ruby on Rails Active Storage and libvips HDF5 matload. Includes Python…
theopaid/cve-2026-67184-unauthenticated-null-pointer-dereference-crashes-the-server-tinyweb-Detailed security advisory and proof-of-concept for CVE-2026-67184, a NULL pointer dereference in TinyWeb leading to denial of service.
si1ent-le/cve-2019-5736Proof-of-concept exploit for CVE-2019-5736, a Docker container escape via runc binary overwrite, enabling host shell access through libseccomp…
ooooooo-q/cve-2022-32224-railsProof-of-concept exploit for CVE-2022-32224: Rails ActiveRecord serialized column RCE. Demonstrates YAML deserialization leading to arbitrary class…
wudidwo/cve-2018-3760-pocProof-of-concept exploit for CVE-2018-3760, a path traversal vulnerability in Ruby on Rails. Demonstrates the flaw for testing and educational…
r4x0r1337/-cve-2012-2661-activerecord-sql-injection-Proof-of-concept exploit for CVE-2012-2661, an SQL injection vulnerability in Ruby on Rails ActiveRecord. Includes a write-up in Malay demonstrating…
mr-in4inci3le/sliver-guiA desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfacing with its…
masahiro331/cve-2020-8165Proof-of-concept exploit for CVE-2020-8165 (Ruby on Rails) demonstrating remote code execution via ERB template injection and deserialization. For…