Cybersecurity virtual experience projects covering Log4j vulnerability response and ransomware recovery with Python. - alainmartar/aig-shields-up-cybersecurity

Contribute to dennywise/CyberPanel-Authenticated-RCE development by creating an account on GitHub.

An emergency security patch by UBITQUITY to mitigate the unauthenticated SQL injection zero-day vulnerability in GeoServer's jsonArrayContains function. This hotfix sanitizes input paramete...

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service - damariion/CVE-2015-1925.RCE

PoCs for three vulnerabilities (plus one chained exploit) in DeepSeek Harness: !!js config execution, read-only sandbox full-fs reads, vm sandbox exec escape → unconfined host RCE - zzszmyf/dsh-sec...

CVE-2026-33017: Langflow Unauthenticated RCE PoC. Contribute to lxxexxbxx/CVE-2026-33017 development by creating an account on GitHub.

An explanation and PoC to exploit CVE-2026-25938 Unauthenticated RCE Vulnerability on FUXA - judgedbykira/CVE-2026-25938-FUXA-Unauthenticated-RCE

Contribute to interim-embryoniccell971/wp2shell-Exploit-Waf-Bypass development by creating an account on GitHub.

OSWE-style white-box web exploitation lab. A Flask monitoring app with chained RCE paths buried in normal business logic — practice source-code review. - JinBaiWansec/sentinelhub

GoDAM WordPress plugin <= 1.12.2 unauthenticated file upload RCE (CVE-2026-14282) - nullwhisper/CVE-2026-14282

MCP environment-variable blocklist bypass leads to unauthenticated RCE in Flowise 3.1.1 - leoelsolh/CVE-2026-69263

Pluck CMS site-wide CSRF (fail-open Referer check) → RCE via double-extension upload. PT-2026-68036, CWE-352/434, CVSS 8.0. Advisory + PoC by @IlhomjonR. - IlhomjonR/PluckCMS-CSRF-RCE

Contribute to Caxtiq/ssti-labs development by creating an account on GitHub.

Contribute to DevXDividends/CodeForge-RCE development by creating an account on GitHub.

0ldSQL_MySQL_RCE_exploit.py (ver. 1.0) (CVE-2016-6662) MySQL Remote Root Code Execution / Privesc PoC Exploit For testing purposes only. Do no harm. - Ashrafdev/MySQL-Remote-Root-Code-Execution

A zero-config Python AST linter that flags unsafe loading of an ML model/artifact (torch.load without weights_only, pickle/joblib/dill.load, np.load allow_pickle, keras load_model, yaml.load) - arb...

Responsible PoC for a missing-authorization-check comment-triggered RCE finding in bazel-contrib/rules_cuda integration-tests.yaml (reported to Google Bug Hunters OSS VRP) - 2423gen-stack/rules-cud...

CVE-2025-55182 — Next.js Flight Deserialization RCE exploit with interactive shell, single-command execution and multi-payload reverse shell chain. For authorized penetration testing only. - dotnet...

PoC exploit for CVE-2022-35914 — GLPI htmLawed command injection, command execution, and reverse shell support. - cyb3rk0ala/CVE-2022-35914-RCE

Here You Can Find Lots of Windows Remote Code Execution(RCE) Exploits - rikgdi/RCE-Exploits