01luyicheng/cve-2026-99999-exploitCVE-2026-99999 Working PoC — real VM escape for Linux kernel csum_start bug (CVSS 9.3). Guest-to-Host heap leak. See also: CVE-2026-99999-analysis…
maxigentr/netviser-linux-security-auditorRead-only, agentless Linux kernel security configuration auditor (local & SSH). Initial focus: TCP migration / MPTCP checks for CVE-2026-98432.
ashu7ank/cve-2026-92392Checks local curl/libcurl builds for CVE-2026-92392 HTTP/2 upload use-after-free exposure, with passive inventory, mounted-image scanning, and a…
yv1ing/secboxConducting cybersecurity testing using the pi agent in a pre-built sandbox environment.
ko0ler/homelabGNS3 home lab documenting a segmented network with Cisco ASAv firewall, L3 core, DMZ, and an Active Directory domain for practicing networking,…
abraxas/gitea-restore-file-openProof-of-concept for a Gitea restore-repo file:// local file inclusion (CWE-73) that copies symlink targets outside an untrusted dump into release…
abraxas/n8n-databricks-path-joinProof-of-concept for an n8n path-traversal (CWE-22) in Databricks nodes: unauthenticated webhook input escapes the Genie path to leak workspace PAT…
abraxas/kafka-connect-filestream-winKafka Connect 4.3.1 - High - Windows FileStream classpath leftover - unauth file read/write
abraxas/moodle-grades-feedback-idorMoodle 5.2.3 - High - Remote - IDOR - core_grades_get_feedback skips separate-groups checks
cisagov/vulnrichmentA repo to conduct vulnerability enrichment.
bombobombone/cve-2026-102971Sanitized report and loopback-only PoC for CVE-2026-102971, a MediaWiki REST revision response leaking hidden revision author user IDs.
abraxas/cve-2026-52782Reproduction pack and PoC script for CVE-2026-52782, an authenticated IDOR in OpenProject project storage settings that hijacks Nextcloud/OneDrive…
clickswave/limeyardDeliberately vulnerable Docker lab with a routable DNS estate and machine-readable answer keys per target, scoring scanner precision, recall and…
ethan-andrews/threatintel-aggregatorSelf-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineering. Runs…
tc4dy/cve-2026-82329-poc-exploitExploit and detection toolkit for CVE-2026-82329, a JFrog Artifactory auth bypass. Forges join JWTs to mint admin tokens; includes a non-intrusive…
guneykabel/cve-2026-85706Python PoC exploit for CVE-2026-85706, an unauthenticated arbitrary file read in GitLab CE/EE via Workhorse path-encoding bypass, with writeup and…
squeeze440/zotlit-pocPoC — attachment import copies files from unapproved local paths in ZotLit (GHSA-4qh7-66xv-h329, CVE-2026-87000, CVSS 5.5).
nu11secur1ty/kali-linux-dockerkali-linux-docker
