20916 matches found
security-research
Security Research This project hosts security advisories and...
GHSA-479M-364C-43VC validateSignature Loop Variable Capture Signature Bypass in goxmldsig
Details The validateSignature function in validate.go goes through the references in the SignedInfo block to find one that matches the signed element's ID. In Go versions before 1.22, or when go.mod uses an older version, there is a loop variable capture issue. The code takes the address of the...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Exploit Development Demo This repository demon...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RC...
Exploit for Classic Buffer Overflow in Freefloat Freefloat_Ftp_Server
🛡️ Memory Corruption Research & Exploitation Lab CVE-2025-554...
Malicious code in manifest-confusion-poc-audit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdce3a4402dab0a3cd3ccff6522e439711936fb0c4077ea260dde4b8392cddc1 The package manifest-confusion-poc-audit was found to contain malicious code...
CVE-2026-32694
creationtimestamp| type| source ---|---|--- 2026-03-18 12:55:22+00:00| published-proof-of-concept| https://github.com/juju/juju/security/advisories/GHSA-5cj2-rqqf-hx9p...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache Path Traversal & RCE Internship Tas...
Toward Scalable Automated Repository-Level Datasets for Software Vulnerability Detection
Software vulnerabilities continue to grow in volume and remain difficult to detect in practice. Although learning-based vulnerability detection has progressed, existing benchmarks are largely function-centric and fail to capture realistic, executable, interprocedural settings. Recent repo-level...
Exploit for OS Command Injection in Nagios Nagios_Xi
Nagios-CVE-2019-15949-RCE-Poc a python PoC for the CVE-2019-15...
skills-poc-malicious
sk...
PoC_kernel_NULL_pointer_clfs.sys
No d...
bounty-hunters
Operation Bounty Hunter — Predator Squad "If it bleeds, we...
CVE-2026-33041
creationtimestamp| type| source ---|---|--- 2026-03-16 15:02:39+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-px7x-gq96-rmp5...
Exploit for XML Injection (aka Blind XPath Injection) in Fonttools
CVE-2025-66034-Poc-to-Get-RCE-for-HTB-VariaType Just run the...
Exploit for Path Traversal in Apple Safari
CVE-2026-20660 PoC Bundle This folder packages a standalone p...
CVE-2026-32941
creationtimestamp| type| source ---|---|--- 2026-03-16 03:01:34+00:00| published-proof-of-concept| https://github.com/BishopFox/sliver/security/advisories/GHSA-97vp-pwqj-46qc 2026-08-03 11:08:45+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96405 2026-08-04 00:00:42+00:00|...
Exploit for Command Injection in Fontforge
⚠️ CVE-2024-25082 - FontForge ZIP Remote Code Execution PoC...
📄 Libjxl Integer Overflow
This Python script generates malicious JPEG XL JXL image files designed to test a potential integer overflow vulnerability in libjxl. The tool creates specially crafted JXL images with extremely large dimensions and manipulated headers that can trigger memory miscalculations when processed by...