HackTheBox-Facts
suriyaboon/hackthebox-factsHTB Facts is a Easy Linux box featuring Camaleon CMS and MinIO. Gain admin access via open registration and a mass assignment vulnerability, then…
cloud-securityctfeducation+7
suriyaboon/hackthebox-factsHTB Facts is a Easy Linux box featuring Camaleon CMS and MinIO. Gain admin access via open registration and a mass assignment vulnerability, then…
discordianfish/cve-2022-0185-crash-pocDocker container that runs a crash proof-of-concept for CVE-2022-0185, a Linux kernel vulnerability. Designed for unprivileged execution to test…
megafart1/cve-2026-2472-vertex-ai-sdk-google-cloudExpose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.
v0wkeep3r/cve-2024-21626-runcpocProof-of-concept for CVE-2024-21626, a runc container escape vulnerability. Includes verification scripts, two exploitation methods (cron reverse…
heroku/heroku-cve-2013-0333Scans Heroku applications for a critical Rails remote code execution vulnerability (CVE-2013-0333) and identifies unpatched instances requiring…
h3ck13r/cve-2026-35204Proof-of-concept demonstrating a path traversal vulnerability (CVE-2026-35204) in Helm plugin installation, allowing arbitrary file write via crafted…
stolichnayer/cve-2025-22828Apache CloudStack vulnerability allows unauthorized access to annotations on certain resources.
kingsrule50/nessus-vulnerability-scanning-labEnterprise vulnerability management on Azure — Terraform-deployed Nessus scanner, credentialed scanning, CVE-2013-3900 remediation with verified…
sk3pper/cve-2024-21626Proof-of-concept exploits for CVE-2024-21626, a Docker/runc container escape vulnerability, demonstrating multiple attack vectors to access and…
pblittle/aws-sutureOpenSSL Heartbleed (CVE-2014-0160) vulnerability scanner.
taroballzchen/cve-2023-28432-metasploit-scannerMinIO Information Disclosure Vulnerability scanner by metasploit
haerin-l/poc_cve-2026-42880Reproduces CVE-2026-42880, a critical ArgoCD vulnerability exposing Kubernetes Secrets via ServerSideDiff. Includes automated lab setup, trigger…
saku0512/cve-2026-54761-pocProof-of-concept demonstrating an authorization bypass in Traefik's Kubernetes Gateway provider (CVE-2026-54761) via a crossProviderNamespaces…
joaoreis13/flight-riskSecurity toolkit for CVE-2025-55182 (React2Shell) — scan, detect, correlate, and test React Server Components RCE vulnerability
ololadeabiola03/aisecplus-week01-servicenow-ai-security-incidentResearch and analysis of the ServiceNow Virtual Agent vulnerability (CVE-2025-12420), including attack flow, MITRE ATT&CK mapping, detection…
amnsecurity/helm-plugin-path-traversal-security-assessmentProfessional vulnerability assessment report for Helm plugin path traversal risk, including technical analysis, impact, remediation, and mitigation…
shaheryar773/mitigate-cve-2026-23869-react-server-component-loopsTechnical troubleshooting repository for fixing infinite rendering vulnerability loops and resource exhaustion threats under CVE-2026-23869 cleanly.
i3r1h0n/ingressnightterrorMy view on IngressNightmare vulnerability (CVE-2025-1974)