CVE-2006-20001
r1az4r/cve-2006-20001A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header…
curated-resourceseducationexploitation+2
r1az4r/cve-2006-20001A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header…
ranggaggngntt/cve-2021-41773Python exploit script for CVE-2021-41773, a path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49, enabling automated…
gitcollect/cve-2016-4971Node.js proof-of-concept exploit for CVE-2016-4971, demonstrating wget FTP redirect filename trust vulnerability with a simple HTTP server.
nosie12/fire-wall-serverPython-based simulated firewall to detect and block Spring4Shell (CVE-2022-22965) exploit attempts. This project filters HTTP requests by identifying…
fauzanwijaya/cve-2002-0748Proof of concept for LabVIEW Web Server HTTP Get Newline DoS vulnerability
alt3kx/cve-2002-0200Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name.
davidblakecoe/axios-cve-2025-27152-pocProof-of-concept exploit for CVE-2025-27152 in Axios, demonstrating a server-side request forgery vulnerability in the popular HTTP client library.
muhammadhuzaifaasif/security-labDocumented CVE-2021-41773 (Apache HTTP Server path traversal, CVSS 9.8) — produced CVSS breakdown, impact assessment, and a mitigation plan (patch to…
0-9194/node-poc-http-smugglingPoC of Backend HTTP Socket Poisoning, via HTTP Smuggling, presented in CVE-2019-15605
likaifeng0/cve-2018-9995_dvr_credentials-dev_toolExploit tool for CVE-2018-9995 that extracts credentials from exposed DVR devices via HTTP request with cookie bypass, targeting multiple vendor…
artofscripting-zz/cmty-ssl-heartbleed-cve-2014-0160-http-httpsDetects the Heartbleed vulnerability (CVE-2014-0160) in OpenSSL on HTTP and HTTPS services via version checking, with guidance for using nmap,…
gmo-ierae/cve-2024-26144-testTest tool for CVE-2024-26144 that checks if web servers and CDNs improperly cache HTTP responses containing Set-Cookie headers, revealing cache…
coana-tech/cve-2022-0155-pocProof-of-concept demonstrating CVE-2022-0155 cookie theft via HTTP redirect in follow-redirects npm package, including Express server and client…
alexoarga/cve-2021-40346Proof-of-concept for CVE-2021-40346, demonstrating HTTP request smuggling in HAProxy via integer overflow, with Docker-based environment to bypass…
cassie0206/cve-2022-21907Proof-of-concept exploit for CVE-2022-21907, a remote code execution vulnerability in Windows HTTP Protocol Stack (HTTP.sys). Demonstrates…
ttestoo/jetty-cve-2020-27223Exploit for Jetty CVE-2020-27223, a vulnerability allowing remote code execution via crafted HTTP requests. Useful for penetration testing and…
dilith006/cve-2014-6271Exploit for CVE-2014-6271 (Shellshock) enabling remote code execution via crafted HTTP headers against vulnerable Bash versions.
mbadanoiu/cve-2019-10092CVE-2019-10092: Limited Cross-Site Scripting via "Proxy Error" Page in Apache HTTP Server