Langflow 1.10.0 urllib SSRF . Contribute to ShadowForge-Cyber/CVE-2026-12944 development by creating an account on GitHub.

PoC: RCE in HuggingFace transformers via attn_implementation + kernels offline trust skip (CVE-2026-4372 bypass sibling) - AUTHENSOR/hf-kernels-rce-proof

A exploit to obtain RCE in CRAFTCMS. Contribute to P34NUT2/CVE-2025-32432-exploit-by-P34NUT development by creating an account on GitHub.

Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled `fs_bsize` field. - g17hubH4ck/CVE-2026-55781-poc

Dependency Confusion C2. Contribute to js-recon/dolus development by creating an account on GitHub.

Trivy vulnerability scanner on Railway. Contribute to mc9max/trivy development by creating an account on GitHub.

Block Adobe's StyleSmuggler exploit with official APSB26-146 patch and interim mitigation guide. - mhilmimusyaffa-beep/stylesmuggler-mitigation

授权渗透测试与 SRC 挖洞工作台 —— 五阶段循环（接单→侦察→挖洞→报告→跟进）+ 状态持久化可断点续跑 + 12 维威胁模型；铁律「先验证业务影响再谈漏洞」，过完三层确认门才判定确认，输出中文 SRC / 客户版渗透测试报告。仅限授权目标。 - Kedibin-Win/pentest-skill

用于SRC漏洞挖掘与渗透测试中的csrf、xss、cors等漏洞的验证与利用. Contribute to Qexzi/myExploitServer development by creating an account on GitHub.

2022计算机毕设一套 终稿 （论文+前后端程序源代码）基于Jboss框架的渗透测试研究_7343e07d-dc1f-43ad-807b-cb4efaff1aa5.zip - fireditoo/UtlMdvBG

CVE-2026-12793 - JetFormBuilder Unauthorized RCE (CRITICAL 9.8) - abraxas/CVE-2026-12793

Zero-days per week, before and after Mythos: exploited CVEs, AI-found vulnerabilities and vendor patch volume, one ISO week at a time since 2021. - sirbennyy88/zero-project

Contribute to TreasureBoy99/CVE-Poc_All_in_One development by creating an account on GitHub.

Web 漏洞靶场与扫描器评测基准 | 每个漏洞配源码 · Writeup · 机读 PoC · 修复对照 - hediwen831-star/vulnlab

外网攻击面自动化测绘与漏洞验证平台 | 异步资产发现 · 泛解析过滤 · 自研 YAML PoC 引擎 · 负向对照校验防误报 - hediwen831-star/attack-surface

漏洞 POC，仅有前台登录部分，后台是存在 RCE 的，只不过没深入分析。. Contribute to heihu577/datart-v1.0.0-rc.3-poc development by creating an account on GitHub.

AI-powered vulnerability scanner with ML detection. - 6qzr/HAVS

Build powerful Remote Access Trojans with RAT's intuitive builder, featuring anti-VM bypass, Discord webhooks, and one-click EXE generation. - heraldist-requiredcourse4681/RAT

PoC of bypass in userland EDR & AV with shellcode and modificate PE. September 2026 - Raaatus/PoC-Bypass-EDR-AV-Fully-Userland-PE-Bits-Manipulation

Original standalone Proof-of-Concept exploit and execution harness for CVE-2023-20052 (ClamAV DMG XML Entity Expansion). - tralsesec/CVE-2023-20052

PoC for CVE-2026-67401 — cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE. Includes a self-contained vulnerable lab, SQLi detection, and full exploit chain. - imbas0...