18532 matches found
dzzoffice_upload
It is an offensive tool for web application exploitation. The re...
CVE-2025-11554
creationtimestamp| type| source ---|---|--- 2025-10-11 03:00:05+00:00| published-proof-of-concept| Telegram/-J-WrXaRbddAk7AM1hVYRrsCZwRmMlbnIJpslEgM08Im4...
A Systematic Study on Generating Web Vulnerability Proof-Of-Concepts Using Large Language Models
Recent advances in Large Language Models LLMs have brought remarkable progress in code understanding and reasoning, creating new opportunities and raising new concerns for software security. Among many downstream tasks, generating Proof-of-Concept PoC exploits plays a central role in vulnerabilit...
CVE-2025-61911
creationtimestamp| type| source ---|---|--- 2025-10-10 20:48:29+00:00| published-proof-of-concept| https://github.com/python-ldap/python-ldap/security/advisories/GHSA-r7r6-cc7p-4v5m...
CVE-2025-61912
creationtimestamp| type| source ---|---|--- 2025-10-10 20:48:19+00:00| published-proof-of-concept| https://github.com/python-ldap/python-ldap/security/advisories/GHSA-p34h-wq7j-h5v6...
Exploit for CVE-2023-29386
PoC exploit for CVE-2023-29386, an unauthenticated arbitrary fil...
CVE-2025-61920
creationtimestamp| type| source ---|---|--- 2025-10-10 02:28:44+00:00| published-proof-of-concept| https://github.com/authlib/authlib/security/advisories/GHSA-pq5p-34cr-23v9...
Exploit for Incorrect Authorization in Apache Ofbiz
This is a PoC exploit for CVE-2024-38856, a remote code executio...
POCs
Proof of Concepts This repository contains Proof of Concept...
cryptidy-analysis
PoC for cryptidy pickle deserialization RCE 🚨 CVE PoC — Unsaf...
Exploit for Improper Input Validation in Microsoft
MSMQ Vulnerability Proof of Concept This repository contains...
Exploit for Use After Free in Redis
CVE-2025-498...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
CVE-2025-32463 - Vulnerable: sudo 1.9.14, 1.9.15, 1.9.16, 1.9...
ExPrESSO: Zero-Knowledge Backed Extensive Privacy Preserving Single Sign-On
User authentication is one of the most important aspects for secure communication between services and end-users over the Internet. Service providers leverage Single-Sign On SSO to make it easier for their users to authenticate themselves. However, standardized systems for SSO, such as OIDC, do n...
CVE-2025-61773
creationtimestamp| type| source ---|---|--- 2025-10-08 23:26:16+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-cjjf-27cc-pvmv...
GHSA-M2GF-X3F6-8HQ3 Deno is Vulnerable to Command Injection on Windows During Batch File Execution
Summary Deno versions up to 2.5.1 are vulnerable to Command Line Injection attacks on Windows when batch files are executed. Details In Windows, CreateProcess always implicitly spawns cmd.exe if a batch file .bat, .cmd, etc. is being executed even if the application does not specify it via the...
Deno is Vulnerable to Command Injection on Windows During Batch File Execution
Summary Deno versions up to 2.5.1 are vulnerable to Command Line Injection attacks on Windows when batch files are executed. Details In Windows, CreateProcess always implicitly spawns cmd.exe if a batch file .bat, .cmd, etc. is being executed even if the application does not specify it via the...
Vulnerability fixed in Oracle E-Business Suite
Oracle has fixed a vulnerability in Oracle E-Business Suite Specifically for the Concurrent Processing component in versions 12.2.3 to 12.2.14. The vulnerability is located in the Concurrent Processing component of the Oracle E-Business Suite. Unauthenticated attackers can exploit this...
Vulnerabilities fixed in Redis
Redis has fixed vulnerabilities in versions 8.2.1 and below. The vulnerabilities are in Redis' Lua scripting engine, which can be exploited by authenticated users. This can lead to remote code execution, out-of-bounds data access or server crashes. The vulnerabilities could compromise the integri...