CVE-2026-33017

CVE-2026-33017 Description CVE-2026-33017 is a simple Proof of Concept PoC demonstrating a specific vulnerability. This project is intended for educational and authorized security testing purposes only. ⚠️ WARNING: Use only in an authorized environment. Unauthorized access to computer systems is...

CVE-2026-19975

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

o1js-scan

o1js-scan Community package: o1js-scan is listed in the official o1js Community Packages directory. Latest: 0.22.0 — a local MCP server lets Claude Code, Cursor and other AI coding assistants run the scanner while you write a zkApp: pip install 'o1js-scanmcp'. It runs on your machine over stdio a...

neko-master

Neko Master See your network traffic clearly. Real-time monitoring · Traffic auditing · Multi-gateway support English | 中文 !IMPORTANT Disclaimer This project is a traffic analysis and visualization tool for local gateway environments. It does not provide any network access service, proxy...

CVE-2025-50505

CVE-2025-50505 Unauthorized API Leads to Arbitrary Command Execution and Privilege Escalation in Clash Verge Rev Description The vulnerability stems from an unauthenticated API endpoint exposed by the clash-verge-service component, which is installed with elevated privileges by default. This flaw...

BrokenPipe

BrokenPipe - Steam Client Service LPE Vulnerability This is the single-script version. The original compiled C++ PoC is on the legacy branch. Thanks to John Hammond for the suggestion, subscribe to him! PoC video: YouTube John Hammond's breakdown: YouTube Greetz to @MSNIGHTMARE2000 for the inspo ...

supernote-obsidian-plugin-PoC

Summary CVE status: requested, pending assignment. This finding is published as GHSA-3gx3-r874-5pp4. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-supernote-obsidian-plugin-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox @squeeze440...

CVE-2026-19490-check

Citrix NetScaler SAML nFactor Context Authentication Bypass — Vulnerability Detection Script A safe, unauthenticated vulnerability check for CVE-2026-19490 , the pre-authentication authentication bypass in the Citrix NetScaler ADC / NetScaler Gateway SAML service-provider path CTX696939, publishe...

CVE-2026-24291

🔓 Privilege Escalation Bypass Utility v2026 Streamlined Access Elevation for Advanced Windows Workflows 🧠 Conceptual Overview This tool is engineered for power users who require frictionless elevation of system permissions without repetitive manual authentication. Think of it as a digital skeleto...

CVE-2024-21546

UniSharp Laravel Filemanager Unauthenticated RCE CVE-2024-21546 This repository contains security assessment tooling, detection templates, and an automated exploit toolkit for identifying and exploiting Unauthenticated Remote Code Execution RCE in applications utilizing the...

CVE-2026-19949

CVE-2026-19949 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha...

openlore-PoC

Path Traversal in OpenLore Spec-Generation Writer via Unsanitized LLM-Derived domain Field CVE status: requested, pending assignment. This finding is published as GHSA-5j8x-q7q6-58j5. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-openlore-PoC and this banner is replaced with the CVE...

CVE-2024-28995

CVE-2024-28995 PoC and Bulk Scanner Overview This repository contains a proof-of-concept PoC and a bulk scanner for the SolarWinds Serv-U CVE-2024-28995 directory traversal vulnerability. This vulnerability allows unauthorized access to read sensitive files on the host machine. The vulnerability...

code-graph-rag-PoC

code-graph-rag: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-85gg-2gfq-q95m. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-code-graph-rag-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox...

CVE-2025-55182-poc

CVE-2025-55182-poc A proof-of-concept PoC exploit for CVE-2025-55182 , targeting an unauthenticated Remote Code Execution RCE vulnerability in Next.js Server Actions. This exploit abuses prototype pollution during the deserialization of React Server Components RSC multipart payloads to inject...

gha-lab-b1fe4918c0

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of AdeptLanguage/Adept at commit...

sharingIsCaring

sharingIsCaring TwonkyMedia Server Pwnd CVE-2018-7171 Background information This is a GitHub repository keeping all relevant information about CVE-2018-7171. and more CVE-2018-7171 represents a directory/file traversal vulnerability in TwonkyMedia Server version 7.0.11-8.5 latest version...

CVE-2024-53027-WIP

CVE-2024-53027-WIP Work in Progress for POC CVE-2024-53027: Qualcomm Bluetooth/Wi-Fi Vulnerability 📄 Overview CVE-2024-53027 is a medium-severity vulnerability CVSS unrated affecting Qualcomm’s WLAN and Bluetooth chipsets in Android devices. It can cause transient denial-of-service DoS when...

CVE-2025-25296

CVE-2025-25296 Proof of Concept POC Description This project demonstrates a Proof of Concept POC for the CVE-2025-25296 vulnerability affecting Label Studio, an open-source data labeling tool. The vulnerability resides in the /projects/upload-example endpoint, which fails to sanitize user-provide...

CVE-2023-45866_WIP

h0nkbtexploit Samsung devices are vulnerable to a critical Bluetooth security vulnerability that allows an attacker to control the targeted device as if they were attached by a Bluetooth keyboard, performing various functions remotely depending on the endpoint. This vulnerability, tracked as...