CVE-2026-0073-Research
novaek/cve-2026-0073-researchCVE-2026-0073 is an RCE with a CVSS severity score of 8.3, and here we will explain how it works.
binary-analysisexploitationreverse-engineering+2
5
novaek/cve-2026-0073-researchCVE-2026-0073 is an RCE with a CVSS severity score of 8.3, and here we will explain how it works.
0x0oz/cve-2026-7482-pocProof-of-concept exploit for CVE-2026-7482, an unauthenticated heap out-of-bounds read in Ollama's GGUF loader, demonstrating memory exfiltration via…
venom203020/cve-2026-5059-pocProof-of-concept demonstrating command injection in aws-mcp-server via shell=True, with analysis of the vulnerable code and the fix in v1.7.0.
shalevo13/se7enslipA scanner and testter of the CVE-2025-11001 of 7-zip
sastraadiwiguna-purpleeliteteaming/dissecting-cve-2026-0628-chromium-extension-privilege-escalationTechnical dissection of CVE-2026-0628, a Chromium WebView privilege escalation vulnerability, including root cause analysis, PoC exploit, detection…
ppwwiinn/cve-2026-2763-pocProof-of-concept exploit for CVE-2026-2763, a use-after-free in Mozilla's JavaScript engine, demonstrating a constrained 1-bit write primitive…
llgsjsm/cve-2026-3008Technical analysis and proof-of-concept for CVE-2026-3008, a format string injection in Notepad++ 8.9.3 via nativeLang.xml, enabling denial of…
atiilla/cve-2026-21852-pocEducational demo of three Claude Code vulnerabilities (hooks bypass, MCP injection, API key exfiltration) with attacker server, MITM proxy, and…
ajansha/cve-2025-60378Proof of concept for stored HTML injection in RISE CRM, demonstrating how authenticated users can inject malicious HTML into invoices and messages,…
ajansha/cve-2025-55903Proof of concept for CVE-2025-55903, a stored HTML injection in PerfexCRM allowing authenticated users to inject malicious HTML into invoices and…
renio-wow/cve-2026-51416Analyzes a specific CVE in WeChat OAuth handler, identifying unbounded HTTP response reads leading to denial of service, with remediation guidance.
kaleth4/cve-2026-7482Technical analysis and educational documentation of CVE-2026-7482, a critical heap buffer over-read in Ollama's GGUF loader, including exploitation…
cobbbex/cisco-asa-vulnerability-researchSystematic reverse engineering of Cisco ASA's lina binary to discover and analyze memory corruption vulnerabilities, including CVE-2025-20333 and…
trailofbits/not-slithering-anywhereThe Python Version of our Not Go-ing Anywhere Vulnerable Application
sneakynachos/cve-2026-15718-who-put-ptrs-in-my-wasmPoC exploit chain for CVE-2026-15718: SpiderMonkey wasm baseline compiler array.fill missing-sync -> invalid pointer -> addrOf/fakeobj -> arbitrary…
sneakynachos/cve-2026-2796-escape-wasm-by-using-wasmPoC exploit chain for CVE-2026-2796: SpiderMonkey WebAssembly sandbox escape (signature type confusion -> arbitrary R/W -> RCE)
n0xdaemon/cve-2026-19478Provides PoC exploits and root-cause analysis for two GitLab GraphQL `@gl_introduced` directive vulnerabilities: unauthenticated method execution and…
losfuzzys/glacierctf2023_writeupsCurated CTF writeup collection for GlacierCTF 2023 covering pwn, rev, web, crypto, and smart contract challenges with solutions and educational…