Tools

mrk336/breaking-the-update-chain-inside-cve-2025-59287-and-the-wsus-rce-threat

Technical analysis and proof-of-concept exploit for CVE-2025-59287, a critical RCE in Windows Server Update Services via unsafe deserialization,…

milot/dissecting-pkexec-cve-2021-4034

Educational analysis and proof-of-concept code for CVE-2021-4034 (pkexec local privilege escalation), with detailed comments explaining the…

maniakh/cve-2026-31431---copy-fail-poc

Bu depo, Linux cekirdeginde (kernel) bulunan CVE-2026-31431 (Copy Fail) zafiyetini icermektedir. Zafiyet, algif_aead modülündeki bir optimizasyon…

lagathos/cve-2026-25595

Stored XSS vulnerability in InvoicePlane 1.7.0 via unsanitized invoice number field, with proof-of-concept and remediation details.

kx00007/cve-2026-29041

Hi, I’m K, This is my first CVE, which is a Remote Code Execution (RCE) vulnerability. It is the beginning of my journey as a security researcher.

khoazero123/cve-2025-32463

Proof-of-concept exploit for CVE-2025-32463, a local privilege escalation in sudo versions 1.9.14-1.9.17, with precompiled library and remediation…

hohn/codeql-sample-polkit

All stages of exploring the polkit CVE-2021-4034 using codeql

gudyrmik/cve-2021-44142

Analysis and proof-of-concept for CVE-2021-44142, a Linux kernel vulnerability, providing technical details and exploitation research.

frawlaboy/cve-2026-39973-poc

Proof of concept (builder) for CVE-2026-39973 (apktool)

dogukankurnaz/cve-2026-20841-poc

Proof-of-concept demonstrating command injection in Windows Notepad via crafted Markdown links, enabling remote code execution. Includes attack…

dinosn/proftpd-cve-2026-42167-analysis

Independent reproduction, code-level root-cause analysis, and realistic-exposure write-up for CVE-2026-42167 (ProFTPD mod_sql is_escaped_text()…

codeb0ssx/cve-2026-21445-poc

Academic proof-of-concept demonstrating CVE-2026-21445 [LangFlow] for authorized security research.

born0monday/cve-2025-8760

Proof of Concept demonstrating CVE-2025-8760, with a detailed technical write-up explaining the vulnerability and exploitation methodology.

alonaki/inventree-path-traversal-cve-2026-33531

This repository contains a professional write-up of a path traversal vulnerability discovered in InvenTree's report template engine. This…

alimezar/cve-2026-27199-werkzeug-safe-join-bypass-poc

Proof-of-concept exploit for CVE-2026-27199, a Werkzeug safe_join() Windows device-name bypass, demonstrating path traversal and silent data discard.

adriangigliotti/cve-2026-666

Educational proof-of-concept for CVE-2026-666, a remote code execution vulnerability in ShadowWeb Framework's deserialization, with technical details…

skotizo/cve-2021-43129

Vulnerability in D2L Brightspace's Learning Management System(LMS)