drupalgeddon2-cve-lab
vaibhav91one/drupalgeddon2-cve-labIntentionally vulnerable Drupal 7.57 lab for reproducing CVE-2018-7600 (Drupalgeddon2) in a Docker container, with an installer script and PHP…
container-securityeducationlabs-practice+3
vaibhav91one/drupalgeddon2-cve-labIntentionally vulnerable Drupal 7.57 lab for reproducing CVE-2018-7600 (Drupalgeddon2) in a Docker container, with an installer script and PHP…
horkimhab/cve-2026-76581Educational repository providing proof-of-concept for CVE-2026-76581, with scripts for authorized security testing and research in isolated…
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
dinosn/givewp-cve-2026-82222-rce-labAuthorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.
fleetdm/fleetOpen-source platform to secure and manage endpoints via MDM, patch management, software deployment, and osquery-powered visibility with compliance…
joaovicdev/exploit-cve-2026-9198Proof-of-concept exploit for CVE-2026-9198, an unauthenticated RCE in IBM Langflow OSS, chaining auto_login and validate/code endpoints. Includes a…
soldier0x0/briefrOpen Vulnerability Intelligence platform, aggregated intel in one dashboard, with correlation and IOC lookups, completely self hosted. All resources…
morzelowski/cve-2026-12243-nltk-pocDocker lab demonstrating CVE-2026-12243 path traversal in NLTK before 3.10.0, contrasting vulnerable and patched behavior with a synthetic secret in…
dependencytrack/dependency-trackIntelligent Component Analysis platform that leverages SBOMs to identify and reduce software supply chain risk through continuous vulnerability…
dinosn/cve-2026-23989-opencloud-labReproduction lab (A/B Docker) for CVE-2026-23989 — OpenCloud / ownCloud Infinite Scale public-link scope-validation bypass in Reva
anchore/syftCLI tool and library for generating a Software Bill of Materials from container images and filesystems
telekom-security/tpotce🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
hunt-benito/your-bot-my-inbox-cve-2026-68929-fastgpt-unauthenticated-wechat-channel-hijackProof-of-concept exploit for CVE-2026-68929, demonstrating unauthenticated cross-tenant takeover of FastGPT WeChat channels via public shareId,…
aarif450/zapscapeGuest-to-host KVM/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers.
huhusmang/awesome-llms-for-vulnerability-detectionThe community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers…
biitts/cve-2026-82286-gpt-crawler-arbitrary-file-writeCVE-2026-82286 — gpt-crawler <=1.5.1 unauthenticated arbitrary file write via outputFileName (POST /crawl). PoC + self-contained Docker lab. CVSS…
investigato/cve-2026-76060_zoneminder_commandinjection-pocProof-of-concept exploit for CVE-2026-76060, an OS command injection in ZoneMinder's event export, demonstrating RCE via crafted monitor names.
horkimhab/cve-2026-66384Educational repository for CVE-2026-66384, providing proof-of-concept resources and guidance for authorized security research, vulnerability…