19281 matches found
reflected-xss-poc
Reflected XSS PoC Description: This repository contains...
Advancing Honeywords for Real-World Authentication Security
Introduced by Juels and Rivest in 2013, Honeywords, which are decoy passwords stored alongside a real password, appear to be a proactive method to help detect password credentials misuse. However, despite over a decade of research, this technique has not been adopted by major authentication...
Exploit for CVE-2025-9983
CVE-20...
RAT-Vulnerabilities
🐀 RAT Vulnerabilities 🐀 --- 🚩 Project overview...
Exploit for CVE-2025-61155
PoC exploit for CVE-2025-61155, a vulnerability in an unspecifie...
Thousands of online stores at risk as SessionReaper attacks spread
Early September, a security researcher uncovered a new vulnerability in Magento, an open-source e-commerce platform used by thousands of online retailers, and its commercial counterpart Adobe Commerce. It sounds like something straight out of a horror movie: SessionReaper. Behind the cinematic na...
MAL-2025-48679 Malicious code in duckduckgo-eslint-config-poc (npm)
The package communicates with a domain associated with malicious activity...
Exploit for Improper Neutralization of Internal Special Elements in Apache Camel
This is a PoC exploit for CVE-2025-27636, a vulnerability in Apa...
Prompt injection in Opera Neon: Rapid response through responsible disclosure
Security Prompt injection in Opera Neon: Rapid response through responsible disclosure Share October 23rd, 2025 Hi Opera users, This week, we were able to address a real-world security scenario on Opera Neon thanks to the work of a security researcher team. The researchers reached out to us throu...
Exploit for Incorrect Comparison in Dynamic-Linq Linq
🐞 CVE-2023-32571 - System.Linq.Dynamic.Core Remote Code Execut...
CVE-2014-1106691
creationtimestamp| type| source ---|---|--- 2025-10-21 03:00:12+00:00| published-proof-of-concept| Telegram/6J7A0ZXG4v13P3LlhGwiMQLoNpZlx5W4nopeRdovsmYgqI 2026-08-18 04:00:03+00:00| published-proof-of-concept| Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktHwo 2026-08-19 00:00:27+00:00|...
YouTube-Scraper-POC
What this repo is The code in this repository is a proof of...
Zero-Days
It is an offensive tool for Windows. This repository appears to...
Exploit for CVE-2025-10041
CV...
Exploit for Code Injection in Microsoft
It is an offensive tool for web exploitation. The repository con...
PT-2025-42804
Name of the Vulnerable Software and Affected Versions Vite versions 2.9.18 through 3.0.0 Vite versions 3.2.9 through 4.0.0 Vite versions 4.5.3 through 5.0.0 Vite versions 5.2.6 through 5.4.21 Vite versions 6.0.0 through 6.4.1 Vite versions 7.0.0 through 7.0.8 Vite versions 7.1.0 through 7.1.11...
CVE-2025-11945 toeverything AFFiNE Avatar Upload Image Endpoint cross site scripting
A vulnerability was identified in toeverything AFFiNE up to 0.24.1. This vulnerability affects unknown code of the component Avatar Upload Image Endpoint. Such manipulation leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used. The...