Tools

g-rubert/cve-2020-14965

TP-LINK Multiple HTML Injection Vulnerabilities

toanln-cov/cve-2026-78071

Stored XSS via Location Title in DPCalendar Free

dievus/cve-2022-27665

Reflected XSS via AngularJS Sandbox Escape Expressions in IPSwitch WS_FTP Server 8.6.0

leekenghwa/cve-2023-33817---sql-injection-found-in-hoteldruid-3.0.5

Proof-of-concept demonstrating SQL injection in HotelDruid v3.0.5, with steps to exploit vulnerable parameters for data retrieval and remote code…

jlvsjp/weblogic_cve-2020-14645

Java PoC for WebLogic CVE-2020-14645 Coherence deserialization RCE. Hosts a malicious class via LDAP and triggers remote code execution on vulnerable…

rhyru9/cups-cve-2024-47176

Exploit for CVE-2024-47176 targeting CUPS printing service vulnerability. Enables remote code execution and privilege escalation on affected…

homjxi0e/cve-2017-3078

Proof-of-concept exploit for CVE-2017-3078, a memory corruption vulnerability in Adobe Flash Player ATF module enabling arbitrary code execution on…

kulik-labs-development/ghost-cms-code-injection-audit-cve-2026-26980

Outdated Ghost CMS websites that have fallen become compromised from CVE-2026-26980 can suffer from spam code injection to pages. Use this to mass…

thehackersbrain/cve-2021-41773

Python exploit for Apache HTTP Server 2.4.49 path traversal and remote code execution (CVE-2021-41773), enabling LFI and RCE on vulnerable servers.

indominusrexes/cve-2025-4322-exploit

Critical CVE-2025-4322 exploit for Firefox on Windows enabling sandbox escape and arbitrary code execution. Includes download link and technical…

sneakynachos/cve-2026-84118-who-labeled-the-crit-as-a-high

Proof-of-concept for CVE-2026-84118, a SpiderMonkey GC use-after-free leading to out-of-bounds read/write and potential code execution. Includes…

cobbbex/cisco-asa-vulnerability-research

Systematic reverse engineering of Cisco ASA's lina binary to discover and analyze memory corruption vulnerabilities, including CVE-2025-20333 and…

fa1c0n35/cve-2021-41773

Exploit for Apache HTTP Server 2.4.49 path traversal and remote code execution vulnerability (CVE-2021-41773), enabling LFI and RCE on vulnerable…

sherlocksecurity/cve-2023-4762-code-review

Code review analysis for CVE-2023-4762, focusing on identifying and understanding the vulnerability through source code inspection.

unknown00759/cve-2023-36158

Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First…

ahmedmansour93/event-id-217-rule-name-soc254-apache-ofbiz-auth-bypass-and-code-injection-0day-cve-2023-51467-

🚨 Just completed an incident report on Event ID 217: Apache OFBiz Auth Bypass and Code Injection 0-Day (CVE-2023-51467). This critical vulnerability…

thesp0nge/dawnscanner

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

louiselalanne/cve-2023-49314

Proof-of-concept exploit for CVE-2023-49314 demonstrating code injection in Asana Desktop on macOS via Electron Fuses, with automated vulnerability…