Tools

ncsc-nl/php2shell

Operational advisory repository tracking CVE-2026-109618 and CVE-2026-109619 PHP RCE flaws, with detection and mitigation guidance, affected software…

oscerd/cve-2026-95628

Runnable proof-of-concept reproducer for CVE-2026-95628, an absolute-path validation gap in Apache Camel camel-docling, with Spring Boot and Quarkus…

deathbydata/php2shell-exposurehunt

Repository for PHP2Shell exposure hunting and related analysis

0xblackash/cve-2026-111497

Advisory and proof-of-concept toolkit for CVE-2026-111497 (Node2Shell), a Brotli heap overflow in Node.js, with trigger scripts, version checker, and…

assetnote/node2shell-scanner

High fidelity detection mechanism for node2shell (CVE-2026-111497)

akamor2800/php-5.4-cve-2026-php2shell-patch

Production-ready backported .patch for EOL PHP 5.4,.23 custom 5.x to fix the critical PHP2Shell (OOM) vulnerability (CVE-2026-109618 /…

trailofbits/brotli-checker

Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.

alvm/php2shell-eol-backport

Unofficial fix for CVE-2026-109618 / CVE-2026-109619 (php2shell) for the end-of-life PHP 5.4 / 5.3 packages of RHEL, CentOS and Oracle Linux 7 / 6

corelight/php2shell-detect

Zeek and Suricata Detections for "php2shell" CVE-2026-109618 and CVE-2026-109619

0xblackash/cve-2026-106173

Documents CVE-2026-106173, a path traversal (CWE-22) in Fortinet FortiSIEM, with impact analysis, detection guidance, and mitigation steps for…

0xblackash/cve-2026-110912

Python/scapy proof-of-concept for CVE-2026-110912 (ARPBleed), an ARP ar_hln/ar_pln out-of-bounds read in DragonFly BSD that leaks kernel heap and…

coactionbrittlemaidenhair51/cve-2026-42978-poc-research

Exploit and analyze CVE-2026-42978 with a Windows Push Notifications module for AI security, multi-protocol terminal, and autonomous agent suite.

aarif450/zapscape

Guest-to-host KVM/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers.

xiaoqimikko/async-http-client-check

Self-hosted AI workspace with agents, skills, and tools (Gmail, Calendar) that runs entirely on your own provider API keys (BYOK). Bring your own…

0xblackash/cve-2026-55450

Advisory documenting CVE-2026-55450, an unauthenticated file upload flaw in Langflow, with impact analysis, detection references, and remediation…

watchtowrlabs/citrix-netscaler-cve-2026-88771-iocs

Indicators of Compromise and hunting guidance for CVE-2026-88771, an unauthenticated command injection in Citrix NetScaler ADC and Gateway, covering…

0xblackash/cve-2026-63292

Documents CVE-2026-63292, a stack-based buffer overflow in Apache mod_vhost_alias, with affected versions, safe version and configuration checks, and…

murrez/cve-2026-14378

Python PoC scanner and exploit helper for CVE-2026-14378, an unauthenticated admin session takeover in the DevKit Pro WordPress plugin via forged…