satheesh575555/external_expat_aosp10_r33_cve-2022-25236Patched version of Expat XML parser for AOSP10, addressing CVE-2022-25236. Provides source code for vulnerability analysis and educational review of…
dwisiswant0/cve-2025-49844Proof-of-concept exploit for Redis 8.2.1 Lua parser use-after-free, racing garbage collection via crafted loadstring calls to achieve remote code…
hv0l/cve-2023-21716_exploitProof-of-concept exploit for CVE-2023-21716, a critical remote code execution vulnerability in Microsoft Word. Demonstrates exploitation of the…
sighup1/cybersecurity-struts2Struts2 Application Vulnerable to CVE-2017-5638. Explains how the exploit of the vulnerability works in relation to OGNL and the JakartaMultiPart…
george0papasotiriou/cve-2026-11112-xxe-via-svg-image-uploadDemonstrates XXE via SVG upload with a vulnerable Flask/lxml parser and an exploit script for arbitrary file read, SSRF, and denial-of-service…
kre80r/cve-2020-13756-envVulnerable test environment for CVE-2020-13756 (Sabberworm PHP CSS Parser RCE)
ifygecko/cve-2023-30226Documentation of a denial-of-service vulnerability in the Rizin reverse engineering framework's ELF parser, caused by a forged DT_VERNEEDNUM value…
george0papasotiriou/cve-2026-22013-hardware-wallet-usb-descriptor-buffer-overflowStack buffer overflow PoC for a hardware wallet USB descriptor parser (CVE-2026-22013), showing return-address overwrite and code execution via…
george0papasotiriou/cve-2026-23002-5g-nas-message-buffer-overflow-in-gnodebSimulated 5G gNodeB NAS parser with stack buffer overflow PoC for CVE-2026-23002; a crafted NAS message triggers remote code execution.
trinadh465/external_expat-2.1.0_cve-2022-43680Source code repository for Expat 2.1.0, a stream-oriented XML parser library, with focus on analyzing and addressing CVE-2022-43680.
cc3305/cve-2024-23897Exploit script for CVE-2024-23897, leveraging Jenkins CLI command parser misconfiguration to read arbitrary files on unpatched Jenkins controllers…
4minx/cve-2026-64638CVE-2026-64638 (XSS2shell) POC.
george0papasotiriou/cve-2026-6789-stack-buffer-overflow-in-embedded-tls-certificate-parserStack buffer overflow PoC in an embedded TLS certificate parser using a crafted X.509 SAN extension for remote code execution on IoT and industrial…
saretawa/cve-2015-9357-pocProof-of-concept exploit for CVE-2015-9357: stored XSS in WordPress smiley parser that bypasses wp_kses, chains nonce forgery to create admin…
rnnsz/cve-2017-15950Proof-of-concept exploit for CVE-2017-15950, a stack-based buffer overflow in SyncBreeze XML parser and sync functionality. Includes Python payload…
icewall/cve-2016-2334Exploit for CVE-2016-2334: heap overflow in 7zip's HFS+ archive parser. Includes HFS+ file generator and WinDbg heap analysis scripts for debugging…
0759104103/cd-cve-2019-11932Proof-of-concept for CVE-2019-11932, a double-free vulnerability in WhatsApp's MP4 parser, demonstrating memory corruption through a crafted media…
elyasbassir/cve-2025-49844Exploit script for CVE-2025-49844, a use-after-free vulnerability in Redis Lua parser, enabling remote code execution on vulnerable Redis servers.
