CVE-2023-43804
deepanshu-khurana/cve-2023-43804Containerized three-tier lab reproducing CVE-2023-43804 urllib3 cookie leak via cross-origin redirects, with exploit script and patch verification.
container-securitydefensive-toolseducation+5
deepanshu-khurana/cve-2023-43804Containerized three-tier lab reproducing CVE-2023-43804 urllib3 cookie leak via cross-origin redirects, with exploit script and patch verification.
icemoonhsv/tatsAnalyze and track OAuth 2.0, OIDC, and Microsoft Entra ID tokens from Burp, mitmproxy, or Chrome DevTools captures. Visualize token lifecycles,…
squeeze440/linux-entra-sso-pocPoC — origin validation error enabling Entra ID PRT SSO cookie exfiltration in linux-entra-sso (GHSA-g9vc-5j77-f2cm, CVE-2026-87005, CVSS 5.3).
luel-4013/misfortune-cookieInteractive PoC suite for CVE-2014-9222 (Misfortune Cookie) and related router exploits, featuring detection, auth bypass, DoS, and RCE modules with…
eliot-code/cve-2026-52924Technical analysis of CVE-2026-52924, a critical use-after-free in Linux kernel SCTP stale cookie handling, including root cause, attack flow, fix,…
ghostpels/cve-2026-75865Unauthenticated arbitrary file upload -> RCE in WPLP Cookie Consent (gdpr-cookie-consent) <= 4.4.1 - technical write-up and PoC
on3sk-0x1/cve-2026-19900-pocProof-of-concept exploit for CVE-2026-19900, an authentication bypass and remote code execution vulnerability in LB-LINK X-PRO routers, allowing…
charanmv08/cve-2022-29117-assessmentCVE-2022-29117 (.NET Cookie-Handling DoS) Assessment, Understanding & Questions Framework
bugresearch/cve-2026-6274Proof-of-concept exploit for CVE-2026-6274, an authentication bypass in Redline WR3200 routers allowing unauthorized password change via static…
xmyronn/cve-2026-6184-stored-xssProof-of-concept for a stored XSS vulnerability in Simple Content Management System PHP, demonstrating session cookie theft via unsanitized News…
null200ok/cve-2026-3228Scans and exploits CVE-2026-3228, a stored XSS in NextScripts WordPress plugin, with pre-auth detection, authenticated checks, and payload injection…
toanln-cov/cve-2026-74252Stored XSS in J2Commerce Guest Checkout via Cookie Filter Bypass
venomous/cloudscraperA Python module to bypass Cloudflare's anti-bot page.
ridhinva/langflow-cors-scannerScanner: CVE-2025-34291 Langflow Origin Validation Error / CORS Misconfiguration — Python checker (CISA KEV)
hernanrodriguez1/sqli_sleepsDetects time-based SQL injection by sending crafted GET requests to multiple URLs and measuring delayed responses; includes cookie support for…
rotarydrone/globalunprotectDecrypt GlobalProtect configuration and cookie files.
dionach/codeigniterxorCodeIgniter <=2.1.4 session cookie decryption vulnerability
nccgroup/setcookieanalysisinbrowsersSetCookie Analysis in Browser Research Results