Tools

oscerd/cve-2026-101259

Runnable proof-of-concept reproducer for CVE-2026-101259, demonstrating error-message disclosure in Apache Camel camel-coap consumers on Spring Boot…

lzh0082-cloud/code-detection

Replication package studying how LLM vulnerability auditors defer to static-analysis evidence, with a tree-sitter C/C++ front end, controlled…

cookiengineer/actual-php2shell

:robot: (Vibecoded prototype) NO, There is an easy way to exploit this vulnerability!

horkimhab/cve-2026-109618-619

Proof-of-concept code for CVE-2026-109618 and CVE-2026-109619 (php2shell bypass), packaged for authorized lab reproduction and vulnerability research.

4rdr/proofs

Collection of CVE findings, proof-of-concept references, and vulnerability research notes, including ExploitDB entries and credited security…

abraxas/openmeetings-backup-config-path

Apache OpenMeetings 9.1.0 - High - Remote - File write leftover - ADMIN_BACKUP import skips Path.of on Type.PATH

horkimhab/cve-2026

Educational collection of CVE proof-of-concept resources and vulnerability research material for authorized lab testing, defensive study, and secure…

0xblackash/cve-2026-21589

Technical analysis and detection guidance for CVE-2026-21589, a pre-auth path traversal arbitrary file access flaw in Atlassian Data Center products.

watchtowrlabs/watchtowr-vs-atlassian-cve-2026-21589

Python detection artifact that checks Atlassian Jira, Confluence, and Bitbucket instances for the CVE-2026-21589 arbitrary file read vulnerability.

horkimhab/cve-2026-59265

Proof-of-concept and research material for CVE-2026-59265, a LibreOffice and OpenOffice vulnerability, intended for authorized lab testing and…

horkimhab/cve-2026-63277

Educational proof-of-concept repository for CVE-2026-63277, providing vulnerability research material and lab-safe testing guidance for authorized…

4ybrick/cve-2026-100903

PoC and enumeration script for CVE-2026-100903, a missing-authentication flaw in the GEO.RITM REST API that leaks object and driver data anonymously.

0xblackash/cve-2026-63292

Documents CVE-2026-63292, a stack-based buffer overflow in Apache mod_vhost_alias, with affected versions, safe version and configuration checks, and…

zerodayevil/cve-2026-20817

Repository dedicated to CVE-2026-20817, providing vulnerability details and exploitation material for this specific security flaw.

0xblackash/cve-2026-73570

Advisory and detection guidance for CVE-2026-73570, an unauthenticated OS command injection in Zimbra SNMP notification processing leading to remote…

zerodayevil/cve-2026-41651

Repository dedicated to CVE-2026-41651, containing vulnerability-specific information and analysis for this single security issue.

horkimhab/cve-2026-10817

Educational security research repository for CVE-2026-10817, providing proof-of-concept material and lab guidance for authorized vulnerability…

horkimhab/cve-2025-9974

Educational security research repository for CVE-2025-9974, providing vulnerability awareness material and authorized lab guidance for controlled…