Popular repositories Loading
-
B63-POC-CVE-2023-46604
B63-POC-CVE-2023-46604 PublicPoC and verification material for CVE-2023-46604 (Apache ActiveMQ OpenWire marshaller RCE)
Python 1
-
B63-POC-CVE-2026-115560
B63-POC-CVE-2026-115560 PublicPoC and verification material for CVE-2026-115560 (PHP session serializer confusion via session.upload_progress -> object injection -> RCE)
Python 1
-
B63-POC-CVE-2026-109618
B63-POC-CVE-2026-109618 PublicPoC and verification material for CVE-2026-109618 (PHP OOM bailout state corruption)
Python 1
-
B63-POC-CVE-2026-109619
B63-POC-CVE-2026-109619 PublicPoC and verification material for CVE-2026-109619 (PHP stale worker-global state)
Python
-
B63-POC-CVE-2024-36401
B63-POC-CVE-2024-36401 PublicPoC and verification material for CVE-2024-36401 (GeoServer OGC filter evaluation RCE)
Python
-
B63-POC-CVE-2026-63077
B63-POC-CVE-2026-63077 PublicPoC and verification material for CVE-2026-63077 (JetBrains TeamCity agent-polling deserialization RCE)
Python
Repositories
- B63-POC-CVE-2026-42945 Public
PoC and verification material for CVE-2026-42945 (CWE-122 heap overflow in ngx_http_rewrite_module -> attacker-shaped cleanup hijack -> system() RCE in the ASLR-off worker; patched-twin negative + 5/5 reliability captured in the shipped lab)
- B63-POC-CVE-2026-33186 Public
CVE-2026-33186 (grpc-go): authorization bypass via a slash-less HTTP/2 :path -- b63 showcase, lab-verified with patched and config-leg negatives
- B63-POC-CVE-2026-105192 Public
CVE-2026-105192 (LMCache): pre-auth pickle deserialization RCE over the unauth ZMQ transport (single frame) — b63 showcase, lab-verified with patched-build negative + reliability/matrix evidence
- B63-POC-CVE-2026-60004 Public
CVE-2026-60004 (Gitea): unauth RCE via diffpatch add/add collision -> live git hook in bare temp clone (KEV) — b63 showcase, lab-verified with patched + unaffected negatives
- B63-POC-CVE-2026-20131 Public
CVE-2026-20131 (Cisco FMC): pre-auth Java deserialization to root — VERIFIED-AT-PRIMITIVE showcase artifact (rebuilt twins; appliance not executed, entitlement-gated)
- B63-POC-CVE-2026-75650 Public
CVE-2026-75650 (StyleSmuggler): unauthenticated RCE via template injection in Magento Open Source / Adobe Commerce 2.4.4–2.4.9 — b63 showcase, lab-verified with patched-build negative test
- B63-POC-CVE-2026-115560 Public
PoC and verification material for CVE-2026-115560 (PHP session serializer confusion via session.upload_progress -> object injection -> RCE)
- B63-POC-CVE-2026-96652 Public
PoC and verification material for CVE-2026-96652 (Plex Media Server timeline SSRF, owner-token disclosure chain)
- B63-POC-CVE-2026-63077 Public
PoC and verification material for CVE-2026-63077 (JetBrains TeamCity agent-polling deserialization RCE)
- B63-POC-CVE-2023-46604 Public
PoC and verification material for CVE-2023-46604 (Apache ActiveMQ OpenWire marshaller RCE)
People
This organization has no public members. You must be a member to see who’s a part of this organization.
Top languages
Loading…
Most used topics
Loading…