CVE-2026-36130
cwjchoi01/cve-2026-36130Proof-of-concept demonstrating a vulnerability that disables Microsoft Defender (MsMpEng.exe) by locking a folder and rebooting, with screenshots…
defensive-toolsexploitationincident-response+2
cwjchoi01/cve-2026-36130Proof-of-concept demonstrating a vulnerability that disables Microsoft Defender (MsMpEng.exe) by locking a folder and rebooting, with screenshots…
kagurazakasanae/mhyprot2drvcontrolA lib that allows using mhyprot2 driver for enum process modules, r/w process memory and kill process.
kkent030315/evil-mhyprot-cliA PoC for Mhyprot2.sys vulnerable driver that allowing read/write memory in kernel/user via unprivileged user process.
abhinavagarwal07/nvidia-gpu-security-pocPoCs and evidence for two NVIDIA Linux GPU driver findings closed by the vendor as expected/intended behavior: cross-UID GPU process telemetry via…
kvakirsanov/cve-2026-31431-live-process-code-injectionProof-of-concept for CVE-2026-31431 demonstrating live process code injection via page cache, achieving arbitrary code execution in a running process…
sneakynachos/cve-2026-4692-trust-me-im-in-rdmProof-of-concept exploit for Firefox BrowsingContext authorization bypass (CVE-2026-4692), demonstrating forged IPC messages to set InRDMPane and…
seokjohn/cve-2026-1880ASUS DriverHub Driver Update Process TOCTOU Vulnerability Leading to LPE
redyank/cve-2026-33310Proof-of-concept demonstrating command injection via shell() expansion in parameter defaults of Intake catalogs, with exploit YAML and reproduction…
oxfemale/killchainKernel Process Termination Tool ( CVE-2026-0828 exploit)
michalbednarski/resourcepoisonWriteup and exploit for CVE-2025-22441: Privilege escalation from installed app to SystemUI process on Android due to pass of untrusted…
kernelzeroday/cve-2026-29000Forge JWE-wrapped unsigned JWTs to bypass pac4j-jwt signature verification (CVE-2026-29000) and authenticate as any user; includes Python CLI,…
djackreuter/cve-2025-60349Proof-of-concept for CVE-2025-60349, demonstrating arbitrary process termination via IOCTL 0x22E044 to the pxscan.sys driver, causing denial of…
cwjchoi01/cve-2026-3796Proof-of-concept exploit for CVE-2026-3796, demonstrating arbitrary process termination via a vulnerable QAX driver. Includes usage instructions and…
uzair-baig0900/cve-2026-20805-pocThe PoC of information disclosure in Microsoft Desktop Windows Management.
sneakynachos/cve-2026-12295-uxxs-in-my-wasmFirefox content->parent srcdoc forge (N-day, bug 2040160): forged PDocumentChannel with SrcdocData on a non-about:srcdoc URI -> attacker HTML served…
pauldechassey/cve-2026-21636Proof-of-concept demonstrating a Node.js permission model bypass (CVE-2026-21636) that allows network access via undici/fetch to local services,…
realrodri/exploiteameestaiOS app to check device compatibility with CVE-2021-30937 vulnerability, displaying alerts and popups during the process.
ssaroussi/cve-2021-37975Playground for demonstrating the exploitation process of CVE-2021-37975, providing a hands-on environment for security researchers to understand and…