React2Shell POC
CVE-2026-4020 - Draft
Technical analysis of CVE-2025-68613, a critical Expression Injection vulnerability in n8n that allows authenticated attackers to achieve Remote Code Execution (RCE)
CVE-2026-48909 PoC
Version: Download Manager 3.3.5.2 Title: Missing Authorization - Unauthenticated IDOR Exploit
Public disclosure for CVE-2026-43655 AppleM2ScalerCSCDriver use-after-free
Security-maintenance fork of disintegration/imaging (CVE-2023-36308 fix) used by Tala WTE
GravityForms < 2.9.23.1 - Unauthenticated Arbitrary File Upload
POC for CVE-2026-24688
POC for CVE-2026-21858
POC for CVE-2025-55182
POC for CVE-2025-48384
POC for CVE-2025-32463
POC for CVE-2025-29927
POC for CVE-2025-29384
POC for CVE-2025-24893
POC for CVE-2025-24071
POC for CVE-2025-24054
Scan a repo's .claude/ config (settings.json hooks, MCP servers, env, allowed-tools) for the RCE & API-key-exfiltration footguns (CVE-2025-59536, CVE-2026-21852) that fire when you clone+open an untrusted repository. Static, zero-dep, local-first.