Unofficial security backports for PrestaShop 1.7.8.11 (EOL). CVE-2026-44212, unauthenticated stored XSS to back-office takeover. Not affiliated with PrestaShop SA. - fstivicic/prestashop17-security...

Static-only Python deobfuscator: unpacks, repairs control flow and folds decoders back into readable source. Never imports or runs the sample. - idam001/pydecomp

A Python-based Vulnerability Scanner that performs localhost port scanning, checks HTTP security configurations, reviews exposed software version information, and generates detailed HTML and JSON v...

Privilege escalation in Enter’s Iperius Backup. Contribute to jonastrikex/CVE-2026-112174-Iperius-Backup-version-8.8.3-PoC development by creating an account on GitHub.

PoC educativo para CVE-2026-123158 (sshole) - bypass de autenticación en OpenSSH sobre musl sin PAM - Doseuser/CVE-2026-123158

C translation of the `SigDrop.cpp` PoC from MSNightmare/SignDrop (Windows CLFS authentication 0day LPE, MIT license), buildable with `x86_64-w64-mingw32-gcc`. - grisuno/sigdropc

Defensive Office macro analyzer in Go: extracts VBA, deobfuscates it and emulates it in a fully simulated sandbox to recover commands, PowerShell, shellcode and dropped payloads without executing t...

Verify sandbox isolation from inside containers, pods, and microVMs (IMDS, proxy bypass, host ports, caps, limits, env secrets) - humanethq/sandbox-check

Dockerized remote RCE PoC for GHSA-673q-mjm6-r5xr (Next.js use cache / React Flight, CVE-2026-126187): one unauthenticated request -> code execution, with a patched victim that is immune. - ...

CVE-2026-105016 - Blind RCE in msquic (QuicStreamSendWrite uint16 underflow) - CVSS 9.8 - LHeiakim/CVE-2026-105016-RCE-PoC

Lab report for "Defending the Network from a Simulated Attack" (Network Security, Firewalls, and VPNs, 3e) — Infection Monkey attack simulation, Metasploit exploitation of Shellsh...

Security auditing toolkit for NEAR smart contracts: deterministic scanner, MCP server, exploit knowledge base - vinibarbosabr/nearsc-auditor

MalGit demonstrate multiple configuration based RCE vectors within Git. - therealcoiffeur/MalGit

Fortinet POC & LABS. Contribute to gasmelia/fortinet-poc development by creating an account on GitHub.

CVE-2026-109619 session.upload_progress LFI exploit chain — Alpine/musl compatible PoC - Oresti-Jorgjiu/CVE-2026-109619-Alpine-SessionLFI

PoC for CVE-2026-33050 / GHSA-9fpx-fr6j-2vh6 - GeoNode OS command injection via uploaded vector layer name - comradezephyr/CVE-2026-33050

Physical modeling synthesizer of human anatomy with the parameters and control tailored to burping/belcing. - daymonCKerns/burpSynth

《网络虚拟化技术》大作业：胡杨好物校园闲置交易平台 + CTF 文件上传靶场（Docker + PHP 8.2） - Cyber-sword/bigwork

Python web vulnerability scanner — SQL injection, XSS, open ports, security headers | OWASP Top 10 | Docker - mdfadhih/python-vuln-scanner

CVE-2026-111760 git2shell PoC: recursive clone executes id+env exfil - 0xd4v1/POC-XPL-REAL-DO-NOT-GIT-CLONE-THIS

Hands-on lab analysis evaluating host-based antivirus scanning (ClamAV) & signature based detection using custom YARA rules in a windows environment. - kkstarazam/Malware-Defense-Threat-Det...