Tools

kavin71725/cve-2025-12543-fix-for-wildfly

Docker base image with backported Host header validation fix for CVE-2025-12543 in Undertow 1.4.x, enabling secure deployment of WildFly 11…

kinokopio/cve-2025-62878

CVE-2025-62878

zsxen/cve-2025-1974

Windows 11-first educational lab for studying CVE-2025-1974 in ingress-nginx. Provides safe attack emulation and defense validation with local…

murataydemir/aws-sam-cli-vulnerabilities

Issue with AWS SAM CLI (CVE-2025-3047, CVE-2025-3048)

michaeladamgroberman/cve-2025-10681

CVE-2025-10681: Hardcoded Azure Blob Storage Account Key — Gardyn Home Kit (ICSA-26-055-03)

rxerium/cve-2025-61882-cve-2025-61884

Detection for CVE-2025-61882 & CVE-2025-61884

6mile/nextjs-cve-2025-29927

A Nuclei template to detect CVE-2025-29927 the Next.js authentication bypass vulnerability

zenzue/cve-2025-9074

Proof-of-concept exploit for CVE-2025-9074 demonstrating container-to-host file write via exposed Docker Engine API on Windows. For authorized…

qianlijaingshan/milvus-auth-audit

Milvus 认证安全检测脚本：CVE-2025-64513 (sourceid后门) / CVE-2026-26190 (/expr弱token) / 内部端口53100

lstudlo/nextjs-cve-demo

演示 Next.js 中的 Middleware 授權繞過漏洞 (CVE-2025-29927) 允許未經授權的用戶存取受保護的資訊。

lem0n817/cve-2025-29927

Local testing environment for Next.js middleware authorization bypass vulnerability (CVE-2025-29927). Demonstrates exploitation via crafted…

jasetpen/cve-2025-69428

A critical access control vulnerability in locally deployed Pro-Bit application in versions less than v1.77.4 allows unauthenticated attackers to…

amnnrth/cve-2025-34291_cors_security_scanner

A lightweight Python-based security assessment tool for detecting dangerous Cross-Origin Resource Sharing (CORS) misconfigurations - CVE-2025-34291.

sudo-wp/sudowp-postgallery

A security-hardened fork of the abandoned "PostGallery" WordPress plugin. Fixes critical Arbitrary File Upload (CVE-2025-13543) and Guest Access…

eyodav/cve-2025-34171

CasaOS expose multiple unauthenticated API endpoints that allow remote disclosure of sensitive configuration files and system debug information

tagoletta/cve-2025-69459

Proof-of-concept exploit for CVE-2025-69459, demonstrating broken access control in Movie Rating System 1.0 that allows unauthenticated admin account…

14mb1v45h/cyberdudebivash-mongodb-detector-v2026

Detect exposed MongoDB instances and CVE-2025-14847 "MongoBleed" risks — Zero-Trust Python scanner

kso4more/cve-2025-0108

Reproduces CVE-2025-0108 path confusion vulnerability in Nginx/Apache stacks. Includes a vulnerable PoC and a patched implementation demonstrating…