PoC: MSDO checkov external-checks-dir RCE via PR-root .checkov.yaml - PDFtoMark/gab-poc-msdo-checkov

检测 OpenSSH + musl 无 PAM 环境的密码认证绕过（* 锁定账户）. Contribute to yanxinwu946/musl-ssh-bypass-scan development by creating an account on GitHub.

CVE-2026-102334 nginx proxy manager Exploit . Contribute to davidoberst/CVE-2026-102334 development by creating an account on GitHub.

Analyzed Agent Tesla malware and developed YARA and Sigma rules to detect its behavior. - bran-dot-flake/Agent-Tesla-Malware-Analysis-and-Detection-Engineering

[ghassess sandbox] Protection exists but admins can bypass: ruleset with 'always' bypass for repo admins + org admins, and classic protection without enforce_admins. - CICD-Test-Ric...

[ghassess sandbox] Hardened default branch via repository ruleset (2 approvals, code owners, status checks, signed commits, linear history, no bypass) + tag ruleset. - CICD-Test-RichF/bp-strong

nginx CVE-2025-50579 CORS Exploit . Contribute to davidoberst/CVE-2025-50579 development by creating an account on GitHub.

CVE-2026-102334 nginx proxy manager Exploit . Contribute to davidoberst/CVE-2026-102334-exploit development by creating an account on GitHub.

Contribute to redfishrouge/CVE-2026-58868-PoC development by creating an account on GitHub.

Contribute to MemDecompression/iscsicpl-uac-bypass development by creating an account on GitHub.

CVE-2026-123158 SSHole — OpenSSH authentication bypass via musl crypt() overflow on Alpine Linux (Exploit PoC) - gabrielunknown/CVE-2026-123158_SSHole

Covert C2 channel over legitimate platforms — stealthy command and control for authorized red team ops - jankesec/ghostlink

Self-hosted dashboard of critical vulnerabilities for sysadmins: CISA & VulnCheck KEV, Cloudflare Zero Wire, Microsoft Patch Tuesday, Ubuntu, Fortinet, TrueNAS, exploit code and EPSS, with ...

ZTE P24 (HGUV6.6.3B5.x): local root from a low-privilege Telnet session via an undocumented login -t flag in SUID BusyBox. Research notes + PoC. - slpkbt/zte-p24-hguv663-root-exploit

CVE-2026-122158: InvoiceShelf cross-tenant privilege escalation analysis and safe local-lab PoC - capivara-research/CVE-2026-122158

PoC for an OpenVPN Windows Interactive Service privilege-boundary bypass that lets a user-selected OpenSSL provider perform privileged route operations through an inherited service channel. - refia...

pre-authentication remote code execution vulnerability affecting OpenIdentityPlatform OpenAM in versions equal to or earlier than 16.0.5 - duohnson/CVE-2026-33439-PoC

A next-generation PHP web shell designed for maximum stealth and power: real-time terminal, auto-kernel exploits, Windows admin bypass, symlink tools, config grabbers, cPanel/WP hacks, mass defacer...

Packet-level investigation of the Natureforce malware traffic exercise. Finds the infected host, extracts and verifies the executable, measures the follow-on session, and ends with draft Suricata a...

Fortinet FortiDAST connector for FortiSOAR. Contribute to ftnt-dspille/connector-fortinet-fortidast development by creating an account on GitHub.