CVE-2021-41773-Apache-Path-Traversal-Lab
1833ravikumar-max/cve-2021-41773-apache-path-traversal-labDocker-based cybersecurity lab for studying and reproducing CVE-2021-41773 in an isolated environment.
ctfeducationexploitation+6
1833ravikumar-max/cve-2021-41773-apache-path-traversal-labDocker-based cybersecurity lab for studying and reproducing CVE-2021-41773 in an isolated environment.
ish3ng0m4/cve-2026-38526-krayincrmAuthenticated Arbitrary File Upload leading to Remote Code Execution Technical analysis and controlled reproduction of CVE-2026-38526 in Webkul…
zoly-zoly/cve-2025-3248Educational analysis and proof-of-concept exploit for CVE-2025-3248, a critical unauthenticated code injection vulnerability in Langflow, including…
yora1928/papercut-cve-2026-81578-82078Security research tool for PaperCut CVE-2026-81578 & CVE-2026-82078
kalhoralireza/cve-2026-17532-labDocker lab demonstrating CVE-2026-17532, an unauthenticated reflected XSS in Seraphinite Accelerator that chains to RCE via admin session, with…
themaxlpalfaboy/cve-2025-54897-labEducational lab demonstrating a deserialization vulnerability in Microsoft SharePoint that enables remote code execution, with a hands-on…
redpack-kr/ashwesker-cve-2026-21440Proof-of-concept exploit for CVE-2026-21440, a critical path traversal in AdonisJS multipart uploads enabling arbitrary file write and remote code…
njeru-codes/cve-2026-25769POC for deserialization of untrusted data in wazuh leading to RCE
hakaioffsec/cve-2026-25769Remote Code Execution via Insecure Deserialization in Wazuh Cluster
dinosn/cve-2026-3844Proof-of-concept exploit for CVE-2026-3844, an unauthenticated arbitrary file upload leading to remote code execution in Breeze Cache <= 2.4.4.…
horkimhab/cve-2026-19912-cve-2026-19913-cve-2026-19914Proof-of-concept exploits for CVE-2026-19912, CVE-2026-19913, and CVE-2026-19914, demonstrating file read and remote code execution in Kaltura,…
alicealys/mgo3-rceProof-of-concept remote code execution exploit for CVE-2026-19874 in Metal Gear Online 3, with documentation and video demo for academic research.
mhassani97/cve-2026-63030-labwp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain
0xblackash/cve-2026-32475Technical analysis and detection guidance for critical unrestricted file upload in Elementor Pro (CVE-2026-32475) leading to remote code execution.
mattiacervelli/cve-2025-24893_analysisSelf-contained Docker lab that reproduces CVE-2025-24893, an unauthenticated SSTI-to-RCE in XWiki SolrSearch, and compares vulnerable vs patched…
ilhomjonr/cve-2026-70376Advisory and Python PoC for Pluck CMS CSRF: fail-open Referer check plus double-extension upload enables webshell deployment and remote code…
aisha-jimoh/cve-2025-55182-react2shell-analysisTechnical analysis of CVE-2025-55182 (React2Shell), covering vulnerability mechanics, root cause, controlled PoC testing, impact, and mitigation…
george0papasotiriou/cve-2026-11104-python-ssti-via-jinja2-attr-filter-bypassPoC exploit for CVE-2026-11104 demonstrating Jinja2 attr filter bypass in Flask, enabling server-side template injection and remote code execution.