zaproxy
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…
android-securityapi-securityapi-security-testing+15
15.7k
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…
iwallplace/cve-2026-26897-ecoonline-deeplinkPublic advisory & PoC for CVE-2026-26897 — Deep Link Bypass in EcoOnline EHS Android (com.airsweb.v10), fixed in 0.2.500
sanupl/cve-2024-34568In LetterPress plugin <= 1.2.1 is vulnerable to Cookie Stealing Vulnerability. An attacker can able to steal the cookies by injecting the JavaScript…
filipegaudard/cve-2026-33149-pocProof-of-concept exploit for CVE-2026-33149, a Host header injection in Tandoor Recipes that enables invite link poisoning and cache poisoning.…
elenichristopoulou/poc-cve-2026-20841Proof-of-concept exploit for CVE-2026-20841, a Windows Notepad remote code execution vulnerability, using a crafted .md file and social engineering…
ajansha/cve-2025-55903Proof of concept for CVE-2025-55903, a stored HTML injection in PerfexCRM allowing authenticated users to inject malicious HTML into invoices and…
dead1nfluence/leantime-pocCVE-2024-27474, CVE-2024-27476, CVE-2024-27477
mlniumm/cve-2025-28073Proof-of-concept for a reflected XSS vulnerability in phpList 3.6.15 via the /lists/dl.php endpoint, enabling session hijacking and arbitrary…
1h3ll/cve-2025-50363_bxss_cveProof-of-concept for a blind XSS vulnerability in Maid Hiring Management System v1.0, capturing admin session cookies via a crafted application form…
dhmosfunk/7-zip-cve-2025-0411-pocThis repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.
ahrixia/cve-2024-57428CVE-2024-57428: PHPJabbers Cinema Booking System v2.0 suffers from stored XSS, enabling persistent JavaScript injection for phishing and malware…
eqstlab/cve-2024-25503Cross-Site Scripting vulnerability in Advanced REST Client v.17.0.9 exploit
mbadanoiu/cve-2020-12625CVE-2020-12625: Cross-Site Scripting via Malicious HTML Attachment in Roundcube Webmail
e1tex/cve-2023-48104Proof-of-concept exploit demonstrating HTML injection in SOGo Web Client before 5.9.1, enabling phishing attacks via malicious forms in email bodies.
k3ystr0k3r/cve-2022-0165-exploitA PoC exploit for CVE-2022-0165 - Page Builder KingComposer WordPress Plugin - ID Parameter Validation Bypass
sybelle03/cve-2021-43617This is a reproduction of PHP Laravel 8.70.1 - Cross Site Scripting (XSS) to Cross Site Request Forgery (CSRF) vulnerability
g37sys73m/cve-2022-46087CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin users through notification…
polling-repo-continua/cve-2022-25257Proof-of-concept exploit for CVE-2022-25257: CSRF parameter injection in SAS Logon 9.4 enabling warning-message spoofing for phishing attacks.