CVE-2026-84180

CVE-2026-84180 — camel-knative: HTTP consumer information disclosure exception written back to the caller Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the Knative HTTP consumer , when an exchange failed on the consumer side, wrote the resulting exception back to t...

MeshTNC

MeshTNC MeshTNC is a tool for piping LoRa data to and from consumer grade radios. Code - github.com/datapartyjs/MeshTNC Releases - github.com/datapartyjs/MeshTNC/releases Support - ko-fi/dataparty Features Simple serial cli built into the firmware Transmit raw bytes hex over LoRA using serial CLI...

restler-fuzzer

RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service with an OpenAPI formerly Swagger specification, RESTler analyzes its...

redis-poc

Redis Authenticated RCE stream NACK double free, TDigest & TopK module bugs Non-destructive RCE exploits for Redis 6.2.22, 7.4.9, 8.6.4 via the stream consumer-group shared-NACK double free a patch bypass of CVE-2026-25243, 8.8.0 via a TDigest heap-overflow in bundled RedisBloom, and 8.8.1 via a...

Spring-Kafka-POC-CVE-2023-34040

Spring Kafka Deserialization POC Requirements Java 11 Maven Docker or Kafka Usage First start up the Dockerized Kafka instance. This will start up Kafka and make it available on port 29092. docker-compose up Start up the Consumer application. cd spring-kafka-consumer mvn clean install mvn...

EtwLeakKernel

EtwLeakKernel This repository contains a PoC for a program that utilizes ETW to leak kernel memory addresses. It does so by creating a consumer could be to almost any provider as almost all of them leak kernel addresses and requesting a stack trace from it. Once the stack trace is received, it is...

OAuth-Request-Crafter

OAuth-Request-Crafter OAuth Request Crafter is a tool that helps you to play with OAuth signature protected URLs. Features Support GET,POST,PUT and DELETE Proxy the Request Tamper URL, Parameters & Headers on the GO Add additional Headers and Cookie Why? When dealing with OAuth signature protecte...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

atproto

Blacksky AppView This is Blacksky's fork of the AT Protocol reference implementation by Bluesky Social PBC. It powers the AppView at api.blacksky.community. We're publishing this for transparency and so other communities can benefit from the work. This repository is not accepting contributions,...

CVE-2026-116528

The Chargely Free Subscriptions For Woocommernce WordPress plugin (versions up to and including 1.0 ) contains a vulnerability where a REST API route fails to perform authorization checks. This allows unauthenticated attackers to retrieve stored configuration details, specifically the live WooCom...

EUVD-2026-125857

The Chargely Free Subscriptions For Woocommernce WordPress plugin through 1.0 does not perform any authorization check on a REST API route that returns its stored configuration, allowing unauthenticated attackers to retrieve the live WooCommerce REST API consumer key and secret it holds, which...

invokeai-consumer

invokeai-consumer Demo consumer app pinned to invokeai==5.0.1 — used by Endor Labs to demonstrate vulnerability detection and exploit-chain analysis against the upstream invokeai library. v5.0.1 is the specific release named in the source CVE CVE-2024-10821...

dlink-dir-819-dos

CVE-2022-40946 Exploit: Unauthenticated Denial of Service in DLink consumer DIR 819 A1 routers Exploit Fetch the sources $ git clone https://github.com/whokilleddb/dlink-dir-819-dos $ cd dlink-dir-819-dos $ pip install -r requirements.txt Run the exploit $ ./exploit.py -i 192.168.0.1 + DLink...

ollama-consumer

ollama-consumer Demo consumer app pinned to github.com/ollama/ollama v0.5.0 — used by Endor Labs to demonstrate vulnerability detection and exploit-chain analysis against the upstream ollama library...

CVE-2026-40860

camel-jms JMS ObjectMessage Unsafe Deserialization Reproducer CVE-2026-40860 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-jms component and, transitively, camel-sjms, camel-sjms2, camel-amqp, camel-activemq, camel-activemq6, tracked as CVE-2026-40860...

CVE-2017-2751

You'll find the .tex and .pdf file for CVE-2017-2751, a BIOS/EFI password extraction for consumer HP laptops...

gin-vulnerable

gin-vulnerable Demo consumer pinned to github.com/gin-gonic/gin v1.7.0 vulnerable to CVE-2023-29401. The /download/:filename handler passes user input directly to Context.FileAttachment — the exploit-condition pattern Endor flags as exploitable...

CVE-2026-128040

OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting vulnerability because admin pages render Dataflow profile link variables, tax rate titles, OAuth consumer names, and PayPal certificate filenames without escaping. An administrator...

CVE-2026-85315

CVE-2026-85315 — camel-grpc: consumer exception disclosure Runnable proof-of-concept reproducer for the Apache Camel vulnerability where, when a route behind a gRPC consumer failed, the route exception's message was copied into the gRPC Status description. Unlike the status cause withCause...,...

CVE-2026-111456

The Candlepin package contains a missing authorization check in the ConsumerResource.setupOwner() function within the consumer registration module. While the system validates permissions for user-based calls, it fails to perform this check for consumers authenticating via identity certificates . ...