ghosttroops/topTOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things
all Top Top Top_Codeql TOP All bugbounty pentesting CVE-2022- POC Exp Things
| star | updated_at | name | url | des |
|---|---|---|---|---|
| 4082 | 2026-10-29T12:10:32Z | copy-fail-CVE-2026-31431 | https://github.com/theori-io/copy-fail-CVE-2026-31431 | Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code |
| 808 | 2026-10-28T02:08:56Z | wp2shell-poc | https://github.com/Icex0/wp2shell-poc | wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain |
| 1044 | 2026-10-30T04:00:35Z | php2shell-CVE-2026-109618-CVE-2026-109619-PoC | https://github.com/eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC | Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only. |
| 2411 | 2026-10-30T03:50:22Z | ghostlock-app | https://github.com/YuKongA/ghostlock-app | GhostLock One-Tap Execution App (CVE-2026-43499) |
| 965 | 2026-10-29T22:05:26Z | php2shell-scanner | https://github.com/assetnote/php2shell-scanner | High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619) |
| 183 | 2026-10-25T16:45:01Z | next-16.2.4-pocs | https://github.com/dwisiswant0/next-16.2.4-pocs | Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572) |
| 992 | 2026-10-28T21:19:02Z | BYOVD | https://github.com/BlackSnufkin/BYOVD | BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501). |
| 576 | 2026-10-25T16:45:04Z | cve_2026_31431 | https://github.com/rootsecdev/cve_2026_31431 | Exploit POC for CVE_2026_31431 |
| 338 | 2026-10-28T14:58:36Z | CVE-2026-54121 | https://github.com/aniqfakhrul/CVE-2026-54121 | Certighost POC |
| 257 | 2026-10-29T01:53:46Z | CVE-2026-43499-popsicle | https://github.com/x-spy/CVE-2026-43499-popsicle | CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k |
| 1506 | 2026-10-30T01:27:48Z | Root-My-Galaxy | https://github.com/BuSung-dev/Root-My-Galaxy | KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499 |
| 233 | 2026-10-21T11:39:34Z | CVE-2026-41089 | https://github.com/0xABCD01/CVE-2026-41089 | Netlogon and CLDAP vulnerability research with a proof of concept. |
| 303 | 2026-10-20T16:49:05Z | CVE-2026-21858 | https://github.com/Chocapikk/CVE-2026-21858 | n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0) |
| 103 | 2026-10-30T03:18:21Z | plex2shell | https://github.com/code-zm/plex2shell | CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656 |
| 291 | 2026-10-29T19:08:06Z | CVE-2026-40369-EXPLOIT | https://github.com/orinimron123/CVE-2026-40369-EXPLOIT | Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox |
| 143 | 2026-10-28T15:54:24Z | CVE-2026-109618-exploit | https://github.com/junaire/CVE-2026-109618-exploit | |
| 209 | 2026-10-19T16:34:56Z | CVE-2026-24061 | https://github.com/SafeBreach-Labs/CVE-2026-24061 | Exploitation of CVE-2026-24061 |
| 163 | 2026-10-24T17:48:39Z | CVE-2026-43499 | https://github.com/MobiusM/CVE-2026-43499 | CVE-2026-43499 PoC |
| 121 | 2026-10-27T17:20:36Z | wp2shell | https://github.com/0xsha/wp2shell | CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core |
| 360 | 2026-10-16T09:45:01Z | copyfail-go | https://github.com/badsectorlabs/copyfail-go | A Go implementation of copyfail (CVE-2026-31431) |
| 191 | 2026-10-22T15:30:43Z | CVE-2026-62911 | https://github.com/hypnguyen1209/CVE-2026-62911 | POC pre-auth RCE on Exchange |
| 477 | 2026-10-30T02:11:24Z | Root-My-Pixel | https://github.com/alex193a/Root-My-Pixel | Jailbreak supported Google Pixel phones with CVE-2026-43499 |
| 482 | 2026-10-28T11:15:05Z | LSPromise | https://github.com/LSPosed/LSPromise | Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881 and CVE-2026-43284 |
| 145 | 2026-10-27T10:37:42Z | CVE-2026-42980-POC | https://github.com/G4sp4rCS/CVE-2026-42980-POC | CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH |
| 509 | 2026-10-28T11:21:07Z | cPanelSniper | https://github.com/ynsmroztas/cPanelSniper | CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection |
| 106 | 2026-10-23T15:03:37Z | CVE-2026-75604-poc | https://github.com/rafabd1/CVE-2026-75604-poc | CVE-2026-75604 Next.js Windows RCE poc |
| 54 | 2026-10-26T22:00:51Z | samsung-android-lpe | https://github.com/Vikramaditya015/samsung-android-lpe | Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982 |
| 69 | 2026-10-29T19:48:55Z | wp2shell-scanner | https://github.com/ZephrFish/wp2shell-scanner | CVE-2026-63030, CVE-2026-60137, wp2shell scanner |
| 1901 | 2026-10-30T02:57:48Z | php2shell-poc | https://github.com/ikow/php2shell-poc | CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research. |
| 223 | 2026-10-20T16:49:26Z | ResetNightmare | https://github.com/Semperis-Community/ResetNightmare | POC tool for ResetNightmare (CVE-2026-27912) |
| star | updated_at | name | url | des |
|---|---|---|---|---|
| 2455 | 2026-10-29T06:22:36Z | react2shell-scanner | https://github.com/assetnote/react2shell-scanner | High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478) |
| 1431 | 2026-10-27T18:26:28Z | CVE-2025-55182 | https://github.com/msanft/CVE-2025-55182 | Explanation and full RCE PoC for CVE-2025-55182 |
| 790 | 2026-10-23T08:13:22Z | CVE-2025-55182-research | https://github.com/ejpir/CVE-2025-55182-research | CVE-2025-55182 POC |
| 493 | 2026-08-11T09:12:24Z | CVE-2018-20250 | https://github.com/WyAtu/CVE-2018-20250 | exp for https://research.checkpoint.com/extracting-code-execution-from-winrar |
| 720 | 2026-10-29T00:10:59Z | CVE-2025-33073 | https://github.com/mverschu/CVE-2025-33073 | PoC Exploit for the NTLM reflection SMB flaw. |
| 992 | 2026-10-28T21:19:02Z | BYOVD | https://github.com/BlackSnufkin/BYOVD | BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501). |
| 532 | 2026-10-27T04:20:04Z | CVE-2025-32463_chwoot | https://github.com/pr0v3rbs/CVE-2025-32463_chwoot | Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463 |
| 248 | 2026-10-13T19:07:36Z | IngressNightmare-PoC | https://github.com/hakaioffsec/IngressNightmare-PoC | This is a PoC code to exploit the IngressNightmare vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974). |
| 345 | 2026-10-30T02:22:48Z | redis_exploit | https://github.com/raminfp/redis_exploit | CVE-2025-49844 (RediShell) |
| 474 | 2026-10-29T09:25:21Z | CVE-2025-32463 | https://github.com/kh4sh3i/CVE-2025-32463 | Local Privilege Escalation to Root via Sudo chroot in Linux |
