poc-cve-collection

Poc CVE Collection

🧪 Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub.

Donate

Decrypting an archived PoC file

Archives use OpenSSL AES-256-CBC with PBKDF2. Build the password by joining these values with _, then append the CVE ID:

PASSWORD_SUFFIX = learn_coding_is_rean-it.com_IlovefamilyHKimhab
PASSWORD_PUBLIC3SEP26 = Ilovemyandwifefamily_AmazingCambodia_Iamaspeckintheuniverse_bluedot_passwordgenerator.rean-it.com$$$
SECRET_KEY_REAN_IT = "rean-it.com..."
Password = PASSWORD_SUFFIX_PASSWORD_PUBLIC3SEP26<SECRET_KEY_REAN_IT><CVE-ID>

Example for CVE-2026-31431:

openssl enc -d -aes-256-cbc -pbkdf2 \
  -in "${FILE}" -out "${CVE_ID}.zip" -pass "pass:${PASSWORD}"
unzip "${CVE_ID}.zip" -d "${CVE_ID}"

Replace FILE with the downloaded filename. Keep the fixed password text in single quotes so the shell does not expand $$.

Example

# CVE-2026-31431

# Title
crypto: algif_aead - Revert to operating out-of-place

# Description
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts…