
CVE-2018-19131
Proof-of-Concept exploit of CVE-2018-19131: Squid Proxy XSS via X.509 Certificate

Proof-of-Concept exploit of CVE-2018-19131: Squid Proxy XSS via X.509 Certificate

A comprehensive web application security testing toolkit that combines 10 powerful penetration testing features into one tool.

Proof-of-concept exploit for CVE-2015-9251, demonstrating a specific web application vulnerability with minimal code for testing and verification.

Demonstrates CVE-2026-31431 by poisoning the cache for a target file with attacker-controlled payload bytes, illustrating a web cache poisoning…

Proof-of-concept exploit for CVE-2019-14319, demonstrating a specific vulnerability in a web application for security testing and verification.

Exploit web cache poisoning via unkeyed query parameters to persist malicious JavaScript responses; includes a vulnerable Flask cache server and PoC…

PoC exploit for CVE-2026-11114 demonstrating Node.js vm sandbox escape via Proxy to achieve remote code execution against a vulnerable HTTP /eval…

Exploits CVE-2026-64638 to convert cross-site scripting into shell access on vulnerable web applications, automating payload delivery and…

Exploit Server-Side Request Forgery (SSRF) vulnerabilities through nginx configurations. Enables testing and exploitation of SSRF in web applications.

Proof-of-concept exploit for CVE-2021-38819, demonstrating a specific web application vulnerability with a targeted exploitation script.

Proof-of-concept exploit for CVE-2020-3187 targeting Cisco web interface vulnerabilities. Provides automated exploitation for security testing and…

Proof-of-concept exploit for CVE-2008-7220, demonstrating a remote code execution vulnerability in a web application.

Proof-of-concept exploit for CVE-2019-13574, demonstrating a specific vulnerability in a web application for testing and verification purposes.

Proof-of-concept exploit for CVE-2026-41242 in a Node.js web application, demonstrating the vulnerability and potential impact.

Yaws web server OS command injection POC

Python exploit script for CVE-2020-28458, a prototype pollution vulnerability in DataTables. It sends crafted payloads to target URLs, supports proxy…

Collection of proof-of-concept exploits for specific CVEs, demonstrating vulnerabilities in web applications and other software.

Java XML serialization library with a focus on CVE-2021-21345 exploit analysis and deserialization vulnerability testing for web applications.