Exploits

A simple python script PoC demonstrating the slow POST chunked transmission vulnerability.

This is a simple PoC written n python that demonstrates the DoS through integer overflow.

CyberPanel v2.4.3 XSS Chain to RCE-CVE-2026-41472

Overview of a application that I reversed using the CVE-2015-2291 exploit from the Intel Ethernet Diagnostics Driver (iQVW32.sys) for memory manipulation used in hwid spoofing.

Proof of Concept for CVE-2026-23745: Arbitrary File Overwrite vulnerability in node-tar (versions < 7.5.3).

RSC Detect CVE 2025 55182

End-to-end remediation of CVE-2013-3900 using PowerShell and Tenable. Demonstrates vulnerability identification, registry hardening, and automated verification in an Azure environment

A stored Cross‑Site Scripting vulnerability exists in xxl-job-admin JobInfoController.java where the addressList parameter accepts unsanitized URL‑encoded JavaScript. The payload is stored and later executed in users’ browsers, lead unauthorized actions.

CVE-2025-61686复现的dockerfile与poc

# CVE-2026-20805 PoC Prueba de concepto para la vulnerabilidad de divulgación de información en **Desktop Windows Manager (dwm.exe)** de Microsoft. ## 📋 Resumen de la Vulnerabilidad - **ID:** CVE-2026-20805 - **Producto:** Microsoft Windows

Asset-wide detection tool for identifying jsPDF usage related to CVE-2025-68428 Detection only — no exploitation

Advanced security scanner detecting exposed files, React2Shell (CVE-2025-55182), ML model poisoning, LLM infrastructure exposure, and invisible Unicode attacks. Built for the 2026 threat landscape.

Remote code execution for React Server Components 19.0.0 - 19.2.0

POC for the CVE-2025-32462 and CVE-2025-32463 vulnerabilities

A XSS vulnerability exists in in React Router's meta()/<Meta> APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag.

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari

Proof-of-Concept 0day for SAP NetWeaver created by ShinyHunters

#exec cmd=... (CVE-2025-58098) argument injection