validation de l'exploitabilitΓ© d'une CVE
Real-world information security risk assessment based on the Oracle E-Business Suite zero-day (CVE-2025-61882). Analyses attacker methods, enterprise risks, and mitigation strategies using ISO 27001, NIST CSF, Cyber Essentials and COBIT.
π Analyze and detect CVE-2026-2406 vulnerabilities in Telnet with this powerful research engine designed for security experts and pentesters.
React2Shell (CVE-2025-55182) POC
PowerShell remediation for CVE-2013-3900 (WinVerifyTrust) / Tenable Plugin 166555 using EnableCertPaddingCheck.
Scanner for the SharePoint CVE-2025-53770 RCE zero day vulnerability (fork from hazcod/CVE-2025-53770)
openshift privilege escalation exploit
openshift privilege escalation exploit
Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in has an easily exploitable, unauthenticated, network-reachable flaw allowing compromise over HTTP. Affected supported versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0.
Bio-Formats β€ 8.3.0 performs unsafe Java deserialization of attacker-controlled .bfmemo cache files during image processing; crafted .bfmemo can trigger deserialization of untrusted data (DoS/logic manipulation; potentially RCE if gadget chains exist).
Proof-of-concept code (Bash and Python) for CVE-2025-65856 where ONVIF implementation in in Xiongmai XM530 IP cameras allows for unauthenticated access to sensitive device information and live video streams
CVE-2026-25747 - Camel LevelDB Deserialization Vulnerability
An exploitation tool for the Next.js vulnerability CVE-2025-55182 that allows remote command execution through a poisoning prototype in React Server Components.
Proof of Concept for CVE-2026-0770 - Langflow Remote Code Execution
Security analysis - CVE-2020-5258
Security analysis - CVE-2020-5258
Security analysis - CVE-2017-16137
Security analysis - CVE-2017-16137