Early warning when attackers start exploiting software you run. - Legatia/hejnal

Local privilege escalation PoC for CVE-2026-87772 (Pardus About): passwordless Polkit action + root mount without nosuid. Reproduced on 1.2.4; fixed in 1.2.5. - jankesec/CVE-2026-87772-pardus-about...

Safe CVE-2026-83844 Microsoft Paint host assessment and clearly separated synthetic shell lab - zake1god/CVE-2026-83844

Signal K Server resources API path traversal audit (CVE-2026-123807): read JWT secret, forge admin token, verify RCE - qianlijaingshan/signalk-audit

Catch SSRF and credential leaks in UTCP manuals, MCP server configs and OpenAPI specs, before they reach CI. - boy-373/utcp-lint

FortiGuard Labs companion for the Omarchy bar: Outbreak Alerts, Threat Signals, Fortinet PSIRT advisories and lookup. Not affiliated with Fortinet. - charbelsarkis/omarchy-bastion

Security Research Toolkit and HackSkills Knowledge Base - Authorized Penetration Testing, Bug Bounty, Web/API Security - 123caiji/security-research-toolkit

Validated OT/ICS CVE POCs from 2026 with firmware verification - Schneider SCADAPack, Modicon M580, nanoMODBUS, IEC 104, TDengine, Langflow - dexteon/ot-ics-cve-pocs-2026

Containerised PoC for CVE-2026-121653: unauthenticated SQL injection (CWE-89) in the Ivanti Endpoint Manager Core status-event service leads to RCE through the Core database account. A model of /WS...

Lab-validated Nuclei templates authored by Securin and merged into projectdiscovery/nuclei-templates - securin-public/securin-nuclei-templates

CVE-2024-8859: MLflow dbfs path traversal (arbitrary file read). Lab-only PoC, detection, remediation. Authorized testing only. - dexteon/mlflow-dbfs-path-traversal-cve-2024-8859

CVE-2025-29927: Next.js middleware authorization bypass. Lab-only PoC, Sigma detection, remediation. Authorized testing only. - dexteon/nextjs-middleware-auth-bypass-cve-2025-29927

Contribute to YuKongA/CVE-2026-98260 development by creating an account on GitHub.

Apache httpd mod_http2 (2.4.55-2.4.70) races on the connection allocator when assign_headers() writes the synthesised Content-Length: 0 into the shared stream table, corrupting the child heap. Cont...

Detection-only triage for Apache HTTP Server 2.4.71 batch: CVE-2026-119618 (mod_http2 RCE, CVSS 9.8), CVE-2026-106023, CVE-2026-109163. Grades httpd versions, catches the distro-backport and mod_h2...

10 pristine CVE RCE lab targets (vulhub/official images, no flag, no CTF artifact) - internal security research - elonma-china/lab-cve-pristine

Containerised proof of concept for CVE-2026-119958, the Windows LDAP remote code execution vulnerability of the November 2026 Microsoft security update (CWE-787, CVSS 9.8). Differential lab with vu...

Safe CVE-2026-83844 lab and Microsoft Paint host assessment - zake1god/Paint2Shell

PoC: unauth RCE via Next.js use-cache typed-array framing desync (CVE-2026-126187 / GHSA-xqc2-xf4c-x3h3) | docker compose lab - TahuCryptsi/poc-cve-2026-126187-rsc-usecache-rce

Containerised PoC for CVE-2026-126147 (Fortinet FG-IR-26-199): a path traversal (CWE-22) in the FortiMail management interface API lets an unauthenticated request write outside the restricted direc...