Tools

christbowel/cve-2026-41900-poc

Proof-of-concept exploit for CVE-2026-41900, an unauthenticated remote code execution in OpenLearnX via container volume mount, enabling /tmp…

wattocyber/offensive-one-liners

110 offensive-security one-liners for authorized testing and CTFs, grouped by category and kill-chain step.

tamatahyt/cve-2026-53576

Kestra Unauthenticated RCE Exploit (CVE-2026-53576)

datadog/security-labs-pocs

Proof of concept code for Datadog Security Labs referenced exploits.

greyorder/cve-2021-21978

CVE-2021-21978 exp

kmkz/exploits

Original CVEs, exploit PoCs, and security advisories with detailed vulnerability chains, privilege escalation, and container escape techniques for…

locus-x64/cve-2025-61765_poc

Proof of Concept of an unsafe pickle deserialization vulnerability in Socket.IO

mrk336/cve-2025-23266

CVE-2025-23266 targets FastAPI’s parse_request() function, where oversized HTTP headers cause a buffer overflow and remote code execution. The…

swsmith2391/cve-2024-29510

POC code for CVE-2024-29510 and demo VulnApp

chitoz1300/react2shell-cve-2025-55182

* React2Shell-CVE-2025-55182

ihsansencan/react2shell-cve-2025-55182

* React2Shell-CVE-2025-55182

wenura17125/cve-2025-49131-poc

Proof-of-concept exploit for CVE-2025-49131, a sandbox escape in FastGPT allowing arbitrary file read/write, import bypass, and remote code execution…

4nuxd/react2shell

R2S is a comprehensive exploitation and post-exploitation framework targeting the Next.js React Server Components vulnerability (CVE-2025-55182). It…

4qu4r1um/tugtainer-1.30.2-cve-2026-55494-and-cve-2026-62308-to-rce

A combination of CVE-2026-55494 and CVE-2026-62308 to get root privilege RCE in tugtainer

0xrakan/coolify-cve-2025-66209-66213

Public security advisory for CVE-2025-66209, CVE-2025-66210, CVE-2025-66211, CVE-2025-66212, and CVE-2025-66213