gobalance-patch
kolmteistov/gobalance-patchSecurity patch and proof-of-concept for GoBalance onion load balancer, covering master key recovery via blindedSign and forged descriptor acceptance,…
cryptographyeducationexploitation+3
4
kolmteistov/gobalance-patchSecurity patch and proof-of-concept for GoBalance onion load balancer, covering master key recovery via blindedSign and forged descriptor acceptance,…
pwnvader/cve-2026-17089-poc-pwnvaderShell PoC for CVE-2026-17089, an unauthenticated reflected XSS in the WordPress Events Manager plugin (<= 7.4.0.1); fingerprints the plugin and tests…
harry178945/cve-2026-38526Python PoC exploiting CVE-2026-38526 in Krayin CRM <= 2.2.x: authenticated PHP webshell upload via /admin/tinymce/upload leading to remote code…
mrdark-ops/cve-2026-38526Python PoC exploiting CVE-2026-38526 in Krayin CRM <= 2.2.x: authenticates, uploads a PHP webshell via /admin/tinymce/upload, and executes commands…
kabiri-labs/rcekitRCE detection and confirmation toolkit that tests URLs or captured HTTP requests for command injection, SSTI, blind and OOB paths, returning tiered…
squ1shification/grafana-plugin-enumerator-cve-2021-43798Bash-based scanner that enumerates Grafana plugin IDs and tests for CVE-2021-43798 directory traversal by attempting to read /etc/passwd or win.ini…
sneakynachos/cve-2026-85048-the-gpu-diedReproducer and technical analysis for CVE-2026-85048, a Chrome viz surface use-after-free in the GPU process, with ASAN unit tests and browser…
bhanunamikaze/activemq-cve-2023-46604Non-destructive validator for Apache ActiveMQ CVE-2023-46604. Sends crafted OpenWire packets, uses HTTP callback server to confirm RCE or XML…
pvharmo2/gha-lab-0ba60e6456Authorized security-research lab reproducing CVE-2024-39700 / GHSA-45gq-v5wm-82wg (JupyterLab extension-template update-integration-tests pwn request)
alt3kx/cve-2026-18963Detection and verification tool for CVE-2026-18963, a Keycloak reset-credentials state bypass. Performs version fingerprinting, realm/client/user…
t3bik/cve-2026-75898Proof-of-concept for CVE-2026-75898, an SSRF in RAGFlow's Invoke component. Demonstrates the vulnerability with unmodified source, includes E2E…
thekawix/cve-2026-41940Generates detection artifacts to verify cPanel/WHM authentication bypass vulnerability (CVE-2026-41940) and tests targets for exposure.
studiogangster/cve-2026-31431Tests for CVE-2026-31431 kernel vulnerability, checks if vulnerable, and provides a fix by disabling the algif_aead module.
simondankelmann/cve-2026-3854-testTests bypasses for CVE-2026-3854 patch, providing a proof-of-concept to validate security fixes.
nickcopi/cve-2025-55315-detection-playgroundPlayground to experiment with different behavior on patched/unpatched Kestrel for the CVE-2025-55315 HTTP smuggling vulnerability
mr-vill4in/log4j-fuzzerAutomated scanner for CVE-2021-44228 (Log4Shell) that tests single or multiple web targets for the vulnerability using remote callback servers.
kernelzeroday/cve-2026-29000Forge JWE-wrapped unsigned JWTs to bypass pac4j-jwt signature verification (CVE-2026-29000) and authenticate as any user; includes Python CLI,…
bartfroklage/cve-2026-41679Proof-of-concept exploit for CVE-2026-41679 in Paperclip AI, testing target for vulnerability and following advisory steps.