CVE-2025-51471

The repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and executable scripts.

This repository contains a functional Proof of Concept (PoC) for CVE-2025-51471, demonstrating a Cross-Domain Authentication Token Exposure vulnerability in Ollama. The exploit involves setting up a malicious registry server that tricks Ollama into sending its authentication token to an attacker-controlled endpoint via a crafted `WWW-Authenticate` header.