Tools

ghostn4444/poc-cve-2025-6554

Proof-of-concept exploit for CVE-2025-6554, a V8 JavaScript engine vulnerability allowing unauthorized access to uninitialized 'Hole' values via…

ard33/cve-2026-4255

Proof-of-concept for CVE-2026-4255, a DLL side-loading privilege escalation in Thermalright TR-VISION HOME, demonstrating PATH-based planting of…

borahll/cve-2021-21220

Educational presentation detailing the exploitation of CVE-2021-21220, a V8 JIT type confusion leading to OOB access and RCE via WebAssembly, with…

kaleth4/cve-2025-47987

Technical analysis and documentation of CVE-2025-47987, a Windows CredSSP heap-based buffer overflow vulnerability enabling local privilege…

valium007/cve-2026-56129

Proof-of-concept exploiting the Toshiba qiomem.sys driver to achieve arbitrary physical memory read/write from ring 3, with a companion writeup.

highandhigh/cve-2015-0057

Detailed technical analysis and exploit implementation for CVE-2015-0057, a win32k.sys use-after-free vulnerability, covering 32-bit and 64-bit…

satheesh575555/linux-4.19.72_cve-2022-36946

Linux kernel source tree modified to reproduce and analyze CVE-2022-36946, a kernel vulnerability, for educational and research purposes.

localh0ste/cve-2025-4138

Tarfile module directory traversal vulnerability ( with overflow crossed Directory ) --> Lead to Privilege escalation

simoesctt/chrono-drip-temporal-viscosity-exploitation-framework-cve-2022-0847

This tool demonstrates the application of fundamental physics discoveries to cybersecurity.

rooobeam/pickle-deserialization-exploit-in-transformers

This study analyzes Python pickle deserialization vulnerabilities, focusing on CVE-2024-3568 in Hugging Face Transformers' TFAutoModel. We reproduce…

dom4570/cve-2022-2588

Detailed write-up and exploit code for CVE-2022-2588, a Linux kernel use-after-free in route4_change leading to privilege escalation via double-free…

chinmay1743/ptrace-vuln

To check for vulnerability CVE-2019-13272

0xbencantcode/cve-2025-43929

High severity vulnerability in KiTTY allowing for local executables to be ran without user confirmation under certain circumstances.

paras98/cve-2021-38297-go-wasm-replication

Educational proof-of-concept replicating CVE-2021-38297, a Go WASM buffer overflow leading to stored XSS. Includes vulnerable app setup, exploit…

satheesh575555/linux-4.19.72_cve-2022-42896

Linux kernel source tree modified to address CVE-2022-42896, providing a reference for vulnerability analysis and exploitation research.

trinadh465/linux-4.19.72_cve-2022-42896

Linux kernel source tree modified to demonstrate or patch CVE-2022-42896, a use-after-free vulnerability in the netfilter subsystem, for analysis and…

trinadh465/linux-4.1.15_cve-2017-1000371

Linux kernel 4.1.15 source tree with modifications related to CVE-2017-1000371, a local privilege escalation vulnerability. Provides a basis for…