Share
## https://sploitus.com/exploit?id=D7D37698-534C-5528-9A33-87E8EA671EEF
# CVE Research

Personal repository for CVE analysis, proof-of-concept code, and vulnerability reproduction.

> **Disclaimer:** All content in this repository is for **educational purposes and authorized security testing only**. Do not use against systems you do not own or have explicit permission to test. The author assumes no liability for misuse.

## Contents

| CVE | Description | CVSS | Category |
|-----|-------------|------|----------|
| [CVE-2021-44228](./CVE-2021-44228/) | Log4Shell โ€” Apache Log4j2 RCE via JNDI | 10.0 Critical | RCE |
| [CVE-2022-22965](./CVE-2022-22965/) | Spring4Shell โ€” Spring Framework RCE | 9.8 Critical | RCE |
| [CVE-2021-41773](./CVE-2021-41773/) | Apache HTTP Server Path Traversal / RCE | 7.5 High | Path Traversal |
| [CVE-2019-11043](./CVE-2019-11043/) | PHP-FPM env_path RCE (Nginx + PHP-FPM) | 9.8 Critical | RCE |

## Structure

Each CVE directory follows this layout:

```
CVE-YYYY-NNNNN/
โ”œโ”€โ”€ README.md        # Vulnerability analysis, timeline, affected versions
โ”œโ”€โ”€ poc/             # Proof-of-concept scripts
โ””โ”€โ”€ references.md    # External references and advisories
```

## Environment

PoC scripts target local Docker-based lab environments. See each directory's README for setup instructions.

## License

MIT โ€” see [LICENSE](./LICENSE)