givewp-cve-2026-82222-rce-lab
dinosn/givewp-cve-2026-82222-rce-labAuthorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.
educationexploitationlabs-practice+2
1
dinosn/givewp-cve-2026-82222-rce-labAuthorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.
davidcarliez/trustmebroBypass llm guardrails by confusing it with fabricated tool output.
joaovicdev/exploit-cve-2026-9198Proof-of-concept exploit for CVE-2026-9198, an unauthenticated RCE in IBM Langflow OSS, chaining auto_login and validate/code endpoints. Includes a…
biitts/cve-2026-82286-gpt-crawler-arbitrary-file-writeCVE-2026-82286 — gpt-crawler <=1.5.1 unauthenticated arbitrary file write via outputFileName (POST /crawl). PoC + self-contained Docker lab. CVSS…
morzelowski/cve-2026-12243-nltk-pocDocker lab demonstrating CVE-2026-12243 path traversal in NLTK before 3.10.0, contrasting vulnerable and patched behavior with a synthetic secret in…
dinosn/cve-2026-23989-opencloud-labReproduction lab (A/B Docker) for CVE-2026-23989 — OpenCloud / ownCloud Infinite Scale public-link scope-validation bypass in Reva
nihal799/zttpZero-trust SSH bastion proxy with Vault-backed key management, RBAC policy enforcement, full session recording, and admin TUI for auditable access to…
hunt-benito/your-bot-my-inbox-cve-2026-68929-fastgpt-unauthenticated-wechat-channel-hijackProof-of-concept exploit for CVE-2026-68929, demonstrating unauthenticated cross-tenant takeover of FastGPT WeChat channels via public shareId,…
rootdirective-sec/cve-2026-29000-labLibrary-level proof-of-concept lab demonstrating CVE-2026-29000 in pac4j-jwt, comparing vulnerable and patched versions with Docker to show forged…
rootdirective-sec/cve-2026-27541-analysis-labDocker lab for reproducing CVE-2026-27541, an authenticated privilege escalation in WooCommerce Wholesale Prices. Compares vulnerable and patched…
rootdirective-sec/cve-2026-1581-analysis-labReproduces CVE-2026-1581, an unauthenticated time-based SQL injection in wpForo Forum <=2.4.14, with a Docker lab and PoC to demonstrate the…
lakr233/vphone-cliBoot and manage virtual iPhones on Apple Silicon with firmware patching, jailbreak variants, and security research features for iOS testing and…
sseshachala/conductaiAI agent governance for teams. Runtime firewalls tell you what happened; Conduct Guard controls what can happen — signed policy, verified chain,…
horkimhab/cve-2026-66384Educational repository for CVE-2026-66384, providing proof-of-concept resources and guidance for authorized security research, vulnerability…
investigato/cve-2026-76060_zoneminder_commandinjection-pocProof-of-concept exploit for CVE-2026-76060, an OS command injection in ZoneMinder's event export, demonstrating RCE via crafted monitor names.
horkimhab/cve-2023-27350-cve-2023-27351Educational proof-of-concept for PaperCut pre-auth RCE chain (CVE-2023-27350, CVE-2023-27351) with setup scripts and authorized testing guidance.
horkimhab/cve-2026-65643Educational repository for learning and researching CVE-2026-65643 in controlled environments, with setup scripts and references for authorized…
machiavelliii/cve-2024-23897Unauthenticated arbitrary file read exploit for Jenkins CVE-2024-23897, with HTTPS and CSRF-crumb support to bypass hardened instances.