PoC for CVE-2026-33050 / GHSA-9fpx-fr6j-2vh6 - GeoNode OS command injection via uploaded vector layer name - comradezephyr/CVE-2026-33050

CVE-2026-109619 session.upload_progress LFI exploit chain — Alpine/musl compatible PoC - Oresti-Jorgjiu/CVE-2026-109619-Alpine-SessionLFI

Fortinet POC & LABS. Contribute to gasmelia/fortinet-poc development by creating an account on GitHub.

MalGit demonstrate multiple configuration based RCE vectors within Git. - therealcoiffeur/MalGit

Security auditing toolkit for NEAR smart contracts: deterministic scanner, MCP server, exploit knowledge base - vinibarbosabr/nearsc-auditor

Lab report for "Defending the Network from a Simulated Attack" (Network Security, Firewalls, and VPNs, 3e) — Infection Monkey attack simulation, Metasploit exploitation of Shellsh...

CVE-2026-105016 - Blind RCE in msquic (QuicStreamSendWrite uint16 underflow) - CVSS 9.8 - LHeiakim/CVE-2026-105016-RCE-PoC

Dockerized remote RCE PoC for GHSA-673q-mjm6-r5xr (Next.js use cache / React Flight, CVE-2026-126187): one unauthenticated request -> code execution, with a patched victim that is immune. - ...

Verify sandbox isolation from inside containers, pods, and microVMs (IMDS, proxy bypass, host ports, caps, limits, env secrets) - humanethq/sandbox-check

Defensive Office macro analyzer in Go: extracts VBA, deobfuscates it and emulates it in a fully simulated sandbox to recover commands, PowerShell, shellcode and dropped payloads without executing t...

C translation of the `SigDrop.cpp` PoC from MSNightmare/SignDrop (Windows CLFS authentication 0day LPE, MIT license), buildable with `x86_64-w64-mingw32-gcc`. - grisuno/sigdropc

PoC educativo para CVE-2026-123158 (sshole) - bypass de autenticación en OpenSSH sobre musl sin PAM - Doseuser/CVE-2026-123158

Privilege escalation in Enter’s Iperius Backup. Contribute to jonastrikex/CVE-2026-112174-Iperius-Backup-version-8.8.3-PoC development by creating an account on GitHub.

A Python-based Vulnerability Scanner that performs localhost port scanning, checks HTTP security configurations, reviews exposed software version information, and generates detailed HTML and JSON v...

Static-only Python deobfuscator: unpacks, repairs control flow and folds decoders back into readable source. Never imports or runs the sample. - idam001/pydecomp

Unofficial security backports for PrestaShop 1.7.8.11 (EOL). CVE-2026-44212, unauthenticated stored XSS to back-office takeover. Not affiliated with PrestaShop SA. - fstivicic/prestashop17-security...

Switch 2 research: ns2jb × CivSwitch — escalate the Civ 7 XSS to the full fs-sysmodule chain on fw 23.0.1 (host-agnostic engine, civshim bridge, shell, captive-portal WebKit rig) - Dviros/BarbarismJB

CVE-2026-121529 - FortiClient CORS RCE (CVSS 9.1). Contribute to Ghost-Bx1/cve-2026-121529-forticlient-cors-rce development by creating an account on GitHub.

CVE-2026-126170 - FortiManager JSON-RPC RCE (CVSS 9.8) - Ghost-Bx1/cve-2026-126170-fortimanager-jsonrpc-rce

Simple Python vulnerability scanner: port scan, outdated version detection, and report generation - obaid404notfound/Vuln_Scanner