CVE-2026-79985
oscerd/cve-2026-79985Reproducer and analysis for CVE-2026-79985, a path traversal in Apache Camel camel-smb where share-listing names bypass directory containment, with…
defensive-toolseducationexploitation+3
oscerd/cve-2026-79985Reproducer and analysis for CVE-2026-79985, a path traversal in Apache Camel camel-smb where share-listing names bypass directory containment, with…
oscerd/cve-2026-79986Reproducer and analysis for CVE-2026-79986, a path traversal in Apache Camel camel-azure-files where share listing names escape the polled directory.
abraxas/pfsense-cp-filename-xsspfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - XSS - CP filename stored XSS
0xblackash/cve-2026-110912Python/scapy proof-of-concept for CVE-2026-110912 (ARPBleed), an ARP ar_hln/ar_pln out-of-bounds read in DragonFly BSD that leaks kernel heap and…
rianjuniorsf/analysis-and-poc-n8n-cve-2025-68613Technical study of the CVE-2025-68613 vulnerability in n8n, covering affected versions, laboratory exploration scenario, offensive and defensive…
m14r41/scan4secretsFind credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and generates SARIF,…
horkimhab/cve-2026Educational collection of CVE proof-of-concept resources and vulnerability research material for authorized lab testing, defensive study, and secure…
abraxas/cakephp-collate-sqliCakePHP 5.4.2 - High - Remote - SQLi - COLLATE collation is a raw SQL fragment
abraxas/cakephp-window-sqliCakePHP 5.4.2 - High - Remote - SQLi - WindowExpression range/frame offsets spliced into SQL
abraxas/element-ics-javascriptElement Web v1.12.29 - High - Remote - XSS - Univention ICS navigation.json link becomes a javascript: menu href
abraxas/phpmyadmin-auth-plugin-unquotedphpMyAdmin 5.2.3 - High - Remote - SQLi - auth plugin identifier unquoted
rianjuniorsf/exploit-js2pyThe CVE-2024-28397 vulnerability affects versions of js2py up to v0.74, a Python library that allows JavaScript code to be executed within the Python…
googleprojectzero/p0toolsCollection of Google Project Zero vulnerability research documents and small standalone security tools, including exploitation and…
githubsecuritylab/seclab-taskflow-agentMCP-enabled multi-agent framework for declarative YAML-driven agentic workflows, used for AI-assisted code auditing, vulnerability triage, and…
sleepingbag945/ddddBatch asset collection and vulnerability scanning tool for red teams. Pulls targets from Hunter, Fofa, and Quake, performs fingerprinting, subdomain…
cisagov/vulnrichmentA repo to conduct vulnerability enrichment.
strik3r0x1/vulnsCollection of public proof-of-concept exploits for multiple CVEs, providing vulnerability demonstration code and references for security research and…
0xblackash/cve-2026-21589Technical analysis and detection guidance for CVE-2026-21589, a pre-auth path traversal arbitrary file access flaw in Atlassian Data Center products.