CVE-2023-21768

CVE-2023-21768 PoC...

react16-ssr

CVE-2018-6341 https://vulners.com/cve/CVE-2018-6341 A simple PoC to reproduce XSS vulnerability Steps npm i npm run start Go to localhost:3006...

CVE-2025-6558-Proof-Of-Concept

CVE-2025-6558-Proof-Of-Concept...

CVE-2020-7961-POC

CVE-2020-7961-POC All the information provided on this site are for educational purposes only. The site and authors of the repository is no way responsible for any misuse of the information...

CyberMeowfiaNS

CyberMeowfia Android Kernel Research This repository documents methods, tools, and case records for Android kernel sample analysis, following the CyberMeowfia research line. The two routes are CVE-2026-43499 and CVE-2026-43074. It is a proof-of-concept disclosure: how to judge root cause, bind...

CVE-2026-29198-POC

CVE-2026-29198-POC Rocket.Chat OAuth2 NoSQL Injection , in Rocket.Chat 8.3.0, 8.2.1, 8.1.2, 8.0.3, 7.13.5, 7.12.6, 7.11.6, and 7.10.9 setup install: pip3 install -r requirement.txt Exploit: python3 poccve202629198.py --url domain --escalate -v...

CVE-2024-1112

CVE-2024-1112 This is a PoC, I wrote for "ResHacker.exe" Heap overflow vulnerability. Usage Execute CVE-2024-1112.py, copy all string at created payload.txt then use it to as parameter to open ResHacker.exe ResHacker.exe $string NOTE: Don't forget the find correct address - You can find full...

CVE-2023-51385_poc

CVE-2023-51385poc CVE-2023-51385poc...

Malicious code in merkle-proof-lite (RubyGems)

RubyGems runs this gem's native extension script ext/merkle-proof-lite/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17609 Malicious code in merkle-proof-lite (RubyGems)

RubyGems runs this gem's native extension script ext/merkle-proof-lite/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

CVE-2026-20700-POC-that-ll-never-work

This repository does not have a README...

CVE-2022-21907-Vulnerability-PoC

CVE-2022-21907 Descripción - POC para CVE-2022-21907: Vulnerabilidad de ejecución remota de código en la pila del protocolo HTTP. - Creado por antx el 2022-01-17, solo algunas pequeñas correcciones de Michele "[email protected]" Detalle - Vulnerabilidad de ejecución remota de código en la...

CVE-2018-5767-AC9

CVE-2018-5767-AC9 Una implementación de una prueba de concepto para CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 Lo siguiente es una actualización de CVE-2018-5767, una vulnerabilidad que explota una llamada no protegida a sscanf que ocurre al analizar el encabezado 'Cookie' para una...

CVE-2026-104424

Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks,...

CVE-2026-104423 Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification

Zebra zebrad before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee...

EUVD-2026-91435

Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks,...

CVE-2026-104423 Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification

Zebra zebrad before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee...

CVE-2026-104423 Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification

Zebra zebrad before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee...

CVE-2026-104424

Zebra versions prior to 6.1.0 are vulnerable to an incorrect calculation in the ZIP-317 block template selector . The flaw stems from omitting the header and transaction-count size from the block budget. An attacker can exploit this by placing valid selectable transactions into a victim miner's m...

CVE-2026-104424 Zebra before 6.1.0 Incorrect Block Size Calculation in getblocktemplate

Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks,...