Static analysis of the DarkSword iOS WebKit exploit chain — delivery, staging, and CVE breakdown (CVE-2025-31277, CVE-2025-43529)
pocexploitCVE-2025-31277
Static analysis of the DarkSword iOS WebKit exploit chain — delivery, staging, and CVE breakdown (CVE-2025-31277, CVE-2025-43529)
A Python 3 reimplementation of the classic CVE-2018-15473 OpenSSH user enumeration exploit, extended with multi-threading, wordlist support, automatic vulnerability detection, and thread-safe exploit patching.
SSH Terrapin Attack Vulnerability Scanner (CVE-2023-48795)
OpenSSH User Enumeration (CVE-2018-15473) Lab
Fork of lodash.template with CVE-2021-23337 fix (command injection via variable option)
PoC for CVE-2024-21626: runc leaks an internal fd referencing the host CWD before pivot_root, enabling container escape by setting process.cwd to /proc/self/fd/7
A demonstration of the recent vuln CVE-2025-27152
Домашняя работа по Pyton № 10 CVE-2020-11022 Краткое описание CVE-2020-11022 — уязвимость типа Reflected XSS (межсайтовый скриптинг), связанная с некорректной обработкой пользовательского ввода, который отражается в HTML-ответе без экранирования. Атакующий может внедрить JavaScript-код, который выполнится в браузере пользователя.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Python Wheel File Security Scanner — scan .whl files for security issues before installation. Detects path traversal (CVE-2026-24049), RECORD tampering, command shadowing, secrets, zip bombs. Zero deps.
Create PoC for CVE-2025-67303
POCs and Tetragon Rules for CVE-2024-21626 and CVE-2025-31133
CVE-2022-0492
A easy poc for CVE-2024-12084.
Exploit Code for CVE-2018-15473
heap overflow allowing execution of arbitrary commands
Microsoft HEIF Extension (msheif_store.dll) OOB-read