
qai2026-fgsm-transfer
Code and results for the QAI 2026 paper on FGSM attack transferability from simulation to IBM quantum hardware.

Code and results for the QAI 2026 paper on FGSM attack transferability from simulation to IBM quantum hardware.

Proof-of-concept exploit for CVE-2026-48519, a pre-auth RCE in IBM Langflow <= 1.9.1 via the Shareable Playground /api/v1/build_public_tmp endpoint.

PoC for CVE-2026-17633 — Authenticated RCE in IBM Langflow OSS 1.0.0–1.10.3 via custom_component endpoint. Includes CVE-2026-17632 AST scanner bypass…

Proof-of-concept exploit for CVE-2026-9198, an unauthenticated RCE in IBM Langflow OSS, chaining auto_login and validate/code endpoints. Includes a…

Exploit for CVE-2026-9198, containing proof-of-concept payloads and validation steps for assessing the vulnerability in target environments.

CVE-2026-9198利用代码

Exploit script for CVE-2026-9198 targeting IBM Langflow, providing proof-of-concept code to validate vulnerabilities and support authorized security…

Curated repository of threat actor aliases and naming schemes used by major threat intelligence vendors, enabling cross-vendor search, attribution,…

Security conference slides covering legacy IBM midrange system security risks, attack surface, and defensive guidance for modern enterprises.

Idempotent functions for IBM Security Appliance REST APIs. Currently covering ISAM and ISDS Appliances.

IBM Langflow Unauthenticated RCE via Auto-Login Bypass

Proof of Concept for CVE-2026-9198 - IBM Langflow Unauthenticated RCE via Auto-Login Bypass

Unauthenticated RCE exploit for Langflow OSS chaining auto_login JWT bypass with validate/code exec() to achieve remote command execution and reverse…

CVE-2020-4464 / CVE-2020-4450

Tool to check whether a PGP client is affected by CVE-2021-33560

Proof-of-concept exploit for CVE-2022-26377, an AJP smuggling vulnerability that poisons the HTTP response queue of IBM QRadar with a stored redirect.

CVE-2023-30990 exploits

CVE-2022-47986: Python, Ruby, NMAP and Metasploit modules to exploit the vulnerability.