Horde IMP (through 6.2.27) vulnerability – obfuscation via HTML encoding – XSS payload - natasaka/CVE-2025-30349

A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild. - ui-bootstrap/...

Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion - Nxploited/CVE-2025-2294

IngressNightmare (CVE-2025-1974). Contribute to tuladhar/ingress-nightmare development by creating an account on GitHub.

A safe CTF challenge demonstrating CVE-2025-21298 using RTF and OLE objects. - Denyningbow/rtf-ctf-cve-2025-21298

This repository is for educational and research purposes. - yuzu-juice/CVE-2025-29927_demo

Exploit. Contribute to cnetsec/CVE-2021-24019 development by creating an account on GitHub.

CVE-2025-30208 ViteVulnScanner. Contribute to keklick1337/CVE-2025-30208-ViteVulnScanner development by creating an account on GitHub.

NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js - AnonKryptiQuz/NextSploit

WordPress WPC Smart Upsell Funnel for WooCommerce plugin <= 3.0.4 - Arbitrary Option Update to Privilege Escalation vulnerability - Nxploited/CVE-2025-30772

CVE-2025-30208 | Vite脚本. Contribute to sadhfdw129/CVE-2025-30208-Vite development by creating an account on GitHub.

CVE-2025-29927: Next.js Middleware Exploit. Contribute to 0x0Luk/0xMiddleware development by creating an account on GitHub.

POC IngressNightmare (CVE-2025-1974), modified from https://github.com/yoshino-s/CVE-2025-1974 - rjhaikal/POC-IngressNightmare-CVE-2025-1974

Create lab for CVE-2025-24813. Contribute to AlperenY-cs/CVE-2025-24813 development by creating an account on GitHub.

[WordPress uListing Plugin] <= Privilege Escalation Explo1t - realcodeb0ss/CVE-2025-1653-poc

WordPress SoJ SoundSlides Plugin <= 1.2.2 is vulnerable to Arbitrary File Upload - GitHub - Nxploited/CVE-2025-2249: WordPress SoJ SoundSlides Plugin <= 1.2.2 is vulnerable to Arbit...

Research into systemic PDF417 validation vulnerabilities in AAMVA-compliant ID systems (CVE-2025-31336, CVE-2025-31337, scr1841160) - coleleavitt/AAMVA-PDF417-Vulnerability-Research

Here is a simple but effective exploit for CVE-2025-29927. - w2hcorp/CVE-2025-29927-PoC

CVE-2025-2563 PoC. Contribute to ubaydev/CVE-2025-2563 development by creating an account on GitHub.

Next.js CVE-2025-29927 demonstration. Contribute to dante01yoon/CVE-2025-29927 development by creating an account on GitHub.