Skip to content

Vulnerability Reproduction Lab

Vulnerability Reproduction Lab

Vulnerability Reproduction Lab

Vulnerability Reproduction Lab
CVE 2016 5195
CVE 2016 5195
- Priv esc
  Priv esc
  - CVE-2016-5195 — Dirty COW: Unprivileged Write to Read-Only Root-Owned Files
CVE 2024 12254
CVE 2024 12254
- Dos
  Dos
  - CVE-2024-12254 — asyncio writelines() missing flow control (DoS)
CVE 2024 24549
CVE 2024 24549
- Dos
  Dos
  - CVE-2024-24549 — Apache Tomcat HTTP/2 Deferred Header-Limit Validation DoS
CVE 2024 3094
CVE 2024 3094
- Pre auth rce
  Pre auth rce
  - CVE-2024-3094 — xz/liblzma Supply-Chain Backdoor (Unauthenticated Pre-Auth RCE as Root)
  - Exploit
    Exploit
    
    Xzbot
    Xzbot
    
    xzbot
CVE 2024 32030
CVE 2024 32030
- Unauth rce
  Unauth rce
  - CVE-2024-32030 — Kafka UI Unauthenticated JRMP Deserialization RCE
CVE 2024 4340
CVE 2024 4340
- Recursion dos
  Recursion dos
  - CVE-2024-4340: sqlparse uncontrolled recursion denial of service
CVE 2024 45310
CVE 2024 45310
- Path traversal
  Path traversal
  - CVE-2024-45310: runc symlink-race host inode creation
CVE 2024 47611
CVE 2024 47611
- Path traversal
  Path traversal
  - CVE-2024-47611 — XZ Utils Windows CRT best-fit argument injection and directory traversal
CVE 2024 53271
CVE 2024 53271
- Dos
  Dos
  - CVE-2024-53271 — Envoy BALSA Parser Double-MessageDone() DoS
CVE 2025 1974
CVE 2025 1974
- Rce
  Rce
  - CVE-2025-1974 — ingress-nginx Admission Webhook Unauthenticated RCE
CVE 2025 23047
CVE 2025 23047
- Info leak
  Info leak
  - CVE-2025-23047 — Hubble UI wildcard CORS information disclosure
CVE 2025 24376
CVE 2025 24376
- Auth bypass
  Auth bypass
  - CVE-2025-24376 — kubewarden-controller authorization bypass on AdmissionPolicy
CVE 2026 24880
CVE 2026 24880
- Request smuggling
  Request smuggling
  - CVE-2026-24880 — Apache Tomcat chunk-extension request smuggling
CVE 2026 31431
CVE 2026 31431
- Priv esc
  Priv esc
  - CVE-2026-31431 — Linux AF_ALG AEAD Page-Cache Write to Local Root
CVE 2026 34486
CVE 2026 34486
- Rce
  Rce
  - CVE-2026-34486 — Apache Tomcat Tribes EncryptInterceptor Fail-Open RCE
CVE 2026 42588
CVE 2026 42588
- Rce
  Rce
  - CVE-2026-42588 — Apache ActiveMQ Classic Jolokia addNetworkConnector RCE
CVE 2026 42945
CVE 2026 42945
- Dos
  Dos
  - CVE-2026-42945 — NGINX rewrite heap buffer overflow (CWE-122)
- Rce aslr off
  Rce aslr off
  - CVE-2026-42945 — NGINX Rift: Heap Buffer Overflow to Remote Code Execution
CVE 2026 43515
CVE 2026 43515
- Auth bypass
  Auth bypass
  - CVE-2026-43515 — Apache Tomcat Authorization Bypass via Multi-Collection Security Constraint
CVE 2026 47265
CVE 2026 47265
- Info leak
  Info leak
  - CVE-2026-47265 — aiohttp per-request cookie leaked on cross-origin redirect
CVE 2026 9082
CVE 2026 9082
- Sqli
  Sqli
  - CVE-2026-9082 — Unauthenticated SQL Injection in Drupal Core via JSON:API (PostgreSQL)

Vulnerability Reproduction Lab¶

Verified vulnerability reproductions from the vuln-reproduce-lab pipeline.