Early warning when attackers start exploiting software you run. - Legatia/hejnal

Intentionally vulnerable Flask app to practice path traversal (CWE-22) — a hands-on AppSec lab with Docker, CI/CD, Trivy and GHCR. - iv0ks/fetchly

Safe CVE-2026-83844 Microsoft Paint host assessment and clearly separated synthetic shell lab - zake1god/CVE-2026-83844

Validated OT/ICS CVE POCs from 2026 with firmware verification - Schneider SCADAPack, Modicon M580, nanoMODBUS, IEC 104, TDengine, Langflow - dexteon/ot-ics-cve-pocs-2026

Contribute to YuKongA/CVE-2026-98260 development by creating an account on GitHub.

Safe CVE-2026-83844 lab and Microsoft Paint host assessment - zake1god/Paint2Shell

CVE-2026-72898 — Mass exploitation & post-exploitation toolkit for Metabase. Session forgery, SQLi, PostgreSQL RCE via COPY TO PROGRAM, file read/write, webshell drop, and credential harves...

Arco Switch RCE (save-based userland code execution) - figurophobia/arco-switch-rce

AI-powered network penetration testing for macOS (SwiftUI, Apple Silicon). Scanning, CVE/MITRE mapping, exploit chaining, post-compromise forensics, PDF reports. AI via NovaAIKit 1.0.0 — Ollama/MLX...

CVE-2026-109619 session.upload_progress LFI exploit chain — Alpine/musl compatible PoC - Oresti-Jorgjiu/CVE-2026-109619-Alpine-SessionLFI

Security auditing toolkit for NEAR smart contracts: deterministic scanner, MCP server, exploit knowledge base - vinibarbosabr/nearsc-auditor

Lab report for "Defending the Network from a Simulated Attack" (Network Security, Firewalls, and VPNs, 3e) — Infection Monkey attack simulation, Metasploit exploitation of Shellsh...

Docker environment and evaluation rules for comparing 11 Python static analyzers on three test datasets - Swinkkel/python-static-analyzers-test-environment

MCP server for CVE intelligence: 16 read-only tools for CVE records, CISA KEV, EPSS history, exploits, fix guidance as sources state it, version, SBOM and lockfile checks, vendor advisories, and pe...

PC-only research on PS5 firmware 14.22: official firmware acquisition & verification, 13.60 kernel dump dissected (sysent 677/677 cross-verified), 12-stage userland→kernel exploit chain wit...

CVE-2026-89324 — Basel Post Types ≤ 1.18 unauthenticated auth bypass (forged Opauth callback → admin takeover). PoC + self-contained Docker lab + full analysis. - im0xfay/CVE-2026-89324

roof-of-concept exploit for CVE-2020-24186, an unauthenticated arbitrary file upload in the WordPress plugin Comments - wpDiscuz (slug wpdiscuz, vendor gVectors) versions 7.0.0 - 7.0.4, leading to ...

Hands-on VAPT lab using Kali Linux, Metasploitable 2, Metasploit Framework, and manual exploitation techniques. - AazafRitha/metasploitable2-vapt-lab

CVE-2026-98260 一键 root | 玄戒 O1 家族：Xiaomi Pad 7S Pro 12.5 (violin) / Pad 7 Ultra (jinghu) / 15S Pro (dijun)，内核 6.18.21 | 可选加载 KernelSU / SukiSU / KernelSU Next / 7kimisu - ChaYeWuu/xring-CVE-2026-98...

CVE-2026-126187 Unauthenticated RCE in React Server Components - PoC and Docker lab for GHSA-xqc2-xf4c-x3h3 / GHSA-673q-mjm6-r5xr - briskets/CVE-2026-126187-poc