Tools

pierfrancescoconti/leaflet-cve-2025-69993

Proof-of-concept for CVE-2025-69993: Cross-Site Scripting in Leaflet's bindPopup() method. Includes advisory, impact analysis, and a demo Angular…

kaleth4/cve-2026-28858

Technical analysis of CVE-2026-28858, a critical buffer overflow in Apple iOS/iPadOS kernel, including exploit flow, mitigation, and defensive coding…

mohamedniane/cve-2025-55182-analysis

Security research & exploitation analysis of CVE-2025-55182 (React) — CVSS + OWASP Top 10 mapping

kaleth4/cve-2026-28363

Security advisory detailing CVE-2026-28363, a critical RCE in OpenClaw, including technical analysis, CVSS metrics, and mitigation steps for…

kai-one001/react-router-cve-2025-61686-

Detailed analysis of CVE-2025-61686, a path traversal vulnerability in React Router's file session storage, including root cause, attack scenarios,…

tarunbharathe/zero-click-rce-incident-response-cve-2025-21298

Technical investigation and host containment of a Critical-severity Zero-Click RCE exploit (CVE-2025-21298) using EDR telemetry and static malware…

lck0/cve-2022-22629

Proof of concept for CVE-2022-22629, a heap buffer overflow in Safari's WebGL multi-draw extension, with vulnerability analysis and crash…

open-flaw/cve-2017-11499

Documentation of CVE-2017-11499: a hash flooding remote DoS vulnerability in Node.js caused by constant HashTable seeds, with analysis of the attack…

sandesh9978/cve-2021-3490-ebpf-analysis

Research implementation demonstrating interaction with Linux eBPF subsystem related to CVE-2021-3490. Includes BPF map creation, syscall wrappers,…

jemhadar/mongobleed-dfir-triage-script-cve-2025-14847

The script focuses on safe artifact acquisition first, followed by optional on-host analysis, and produces a portable, hashed forensic archive…

netvanguard-cmd/cve-2025-11832

Proof-of-concept exploit for CVE-2025-11832, demonstrating the vulnerability and providing a technical reference for security testing and analysis.

lagathos/cve-2026-25594

Stored XSS proof-of-concept for InvoicePlane 1.7.0 via the family name field, including payload, request, and impact analysis for defensive research.

havertz2110/cve-2024-48510-poc

Proof-of-concept exploit for CVE-2024-48510, a .NET Zip vulnerability. Includes reproduction steps and technical analysis via accompanying blog post.

identity-threat-labs/article-regresshion-cve-2024-6387

Technical analysis and documentation of CVE-2024-6387, a critical remote code execution vulnerability in OpenSSH, detailing exploitation vectors and…

michalashurov/writeup-cve-2024-3094

Technical analysis and writeup of CVE-2024-3094, the XZ Utils backdoor. Explores the supply-chain attack, exploitation mechanics, and detection…

rrespxwnss/cve-2025-56772

During the analysis of the website ecodotempo.com.br, a Stored Cross-Site Scripting (XSS) vulnerability was discovered. This vulnerability allows an…

shemkumar/cve-2025-46181-xss

Reflected XSS vulnerability disclosure with PoC script and remediation guidance for an online appointment booking system. Includes vulnerable…

anasrami12/cve-2025-5548

Methodology for vulnerability analysis and exploit development, covering static/dynamic analysis, fuzzing, patch diffing, and 0-day research with…