hackerone-reports
reddelexc/hackerone-reportsCurated collection of top HackerOne bug bounty reports organized by vulnerability type and program, with scripts to fetch, deduplicate, and rank…
ctfcurated-resourceseducation+7
6.5k
reddelexc/hackerone-reportsCurated collection of top HackerOne bug bounty reports organized by vulnerability type and program, with scripts to fetch, deduplicate, and rank…
gabrielha12/termix-researchCVE-2026-45746, CVE-2026-45750, CVE-2026-53547 — three critical vulnerabilities in Termix: cross-tenant session hijacking, OS command injection, and…
dinosn/liferay-ga4-rce-researchSecurity research on Liferay CE 7.0.3 GA4: pre-auth RCE as root (CVE-2020-7961 class) reproduced end-to-end, plus 16 more findings — 8+ with no known…
dungsocool/cve-2026-8206CVE-2026-8206: Kirki Customizer Framework - Unauthenticated Account Takeover (CVSS 9.8)
imxur/cve-2026-48908-joomla-sp-page-builder-rceTechnical analysis and advisory for CVE-2026-48908: Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder.
amnsecurity/kirki-wordpress-account-security-assessmentProfessional vulnerability assessment report for Kirki WordPress account security risk, including technical impact, remediation, and mitigation…
nixon-h/cve-2025-68434-ospos-csrfPoC & Write-up for CVE-2025-68434: Critical CSRF in OpenSourcePOS. Exploits a disabled filter configuration to allow unauthenticated attackers to…
vincenzo-emanuele/cve-2025-65640Public advisory for CVE-2025-65640: Stored XSS vulnerability in Globe Document Intelligence.
lukasz-rybak/cve-2025-67876CVE-2025-67876 - ChurchCRM has Stored XSS in Group Role Name Leading to Admin Session Hijacking
infostealers-stats/credential-and-breach-monitoringThis repository provides a practical comparison of breach intelligence, dark web monitoring, and identity exposure services, with a focus on factors…
d3kc4rt1/cve-2025-14893Authenticated Stored Cross-Site Scripting (XSS) in IndieWeb WordPress Plugin
sahiloj/cve-2023-33730eScan Management Console version 14.0.1400.2281 contains privilege escalation via `GetUserCurrentPwd` function lets attackers retrieve any user's…
sahiloj/cve-2023-31703A reflected Cross-Site Scripting (XSS) vulnerability exists in the Edit User functionality of the Microworld Technologies eScan Management Console…
zeroethical/cve-2025-14783-poc🧨 CVE-2025-14783: Easy Digital Downloads Account Takeover PoC
dharan10/cve-2025-67730A public disclourse of CVE-2025-67730 in Frape lms By dharan ragunathan
huyvo2910/cve-2525-25748-cross-site-request-forgery-csrf-vulnerability-in-hoteldruid-3.0.7Cross-Site Request Forgery (CSRF) Vulnerability in HotelDruid 3.0.7 (CVE-2025-25748)