## https://sploitus.com/exploit?id=8833C917-95CE-52BF-A961-A24A6A93BED1
# 🔍 Vulnerability Research
A curated collection of in-depth vulnerability writeups covering real-world security incidents in the software ecosystem. Each entry includes a full technical analysis, proof-of-concept, IOC listing, and remediation guidance.
> **Purpose:** Educational reference and portfolio. All PoC code is for detection and research only.
---
## Index
| # | Vulnerability | Type | Severity | Date | Status |
|---|---------------|------|----------|------|--------|
| 001 | [Axios npm Supply Chain Attack (CVE-2026-26555)](./../../../axios-supply-chain-cve-2026-26555/) | Supply Chain / RAT | 🔴 Critical | Mar 31, 2026 | ✅ Complete |
---
## Structure
Each entry follows a consistent format:
```
/axios-supply-chain-cve-2026-26555/
├── poc/ # Detection & PoC scripts
├── README.md # Project overview
├── analysis.md # Full writeup
└── references.md # Cited sources
```
## Methodology
The writeup covers:
- **Root cause** — what actually broke and how
- **Attack timeline** — pre-staging, execution, discovery, remediation
- **Technical deep-dive** — deobfuscated payloads, attack chain, IOCs
- **PoC** — reproduction or detection scripts
- **Lessons learned** — systemic issues and mitigations
---
*Maintained by [@horrister](https://github.com/horrister)*