Share
## https://sploitus.com/exploit?id=8833C917-95CE-52BF-A961-A24A6A93BED1
# ๐ Vulnerability Research
A curated collection of in-depth vulnerability writeups covering real-world security incidents in the software ecosystem. Each entry includes a full technical analysis, proof-of-concept, IOC listing, and remediation guidance.
> **Purpose:** Educational reference and portfolio. All PoC code is for detection and research only.
---
## Index
| # | Vulnerability | Type | Severity | Date | Status |
|---|---------------|------|----------|------|--------|
| 001 | [Axios npm Supply Chain Attack (CVE-2026-26555)](./../../../axios-supply-chain-cve-2026-26555/) | Supply Chain / RAT | ๐ด Critical | Mar 31, 2026 | โ
Complete |
---
## Structure
Each entry follows a consistent format:
```
/axios-supply-chain-cve-2026-26555/
โโโ poc/ # Detection & PoC scripts
โโโ README.md # Project overview
โโโ analysis.md # Full writeup
โโโ references.md # Cited sources
```
## Methodology
The writeup covers:
- **Root cause** โ what actually broke and how
- **Attack timeline** โ pre-staging, execution, discovery, remediation
- **Technical deep-dive** โ deobfuscated payloads, attack chain, IOCs
- **PoC** โ reproduction or detection scripts
- **Lessons learned** โ systemic issues and mitigations
---
*Maintained by [@horrister](https://github.com/horrister)*