aiohttp: Multiple instances of excessive or unbounded memory/CPU use

PoC: CVE-2026-64560-public

CVE-2026-64560 staged security research package

PoC: InfinityCore-Android-CVE-2026-98260

CVE-2026-98260 (Timer) Android/ARM64 port

PoC: predicted-cve-2026-20349

Panduan Praktikum Edukasi: Deteksi Versi Cisco ASA & FTD (CVE-2026-20349)

PoC: Exploit-VITE-CVE-2025-30208-CVE-2025-31125

Python-based security assessment tool for detecting exposed Vite development servers, identifying sensitive file exposure, and validating filesystem access control weaknesses in authorized environments.

PoC: cve-2026-103849-blockstrap-lab

CVE-2026-103849 (BlockStrap) reproduction lab: unauthenticated {{block}} injection on Magento 2.4.9 via guest GraphQL, A/B vs APSB26-153; command execution only through a labeled synthetic gadget, not stock classes.

PoC: CVE-2026-89079

CVE-2026-89079 — WordPress Theme My Login multisite unauth password overwrite PoC (check, verify, exploit). Not version-only: requires MS + tml_user_passwords.

PoC: Gitlab-RCE-CVE-2026-97229

CVE-2026-97229: GitLab RCE Unauthenticated via CI Lint

PoC: CVE-2026-83531

Reproducer for CVE-2026-83531 (Apache Camel camel-dynamic-router): the dynamic-router-control endpoint compiles an attacker-supplied predicate expression/language from the control message (expression-language / code injection) — Camel Spring Boot

PoC: CVE-2026-80344

Reproducer for CVE-2026-80344 (Apache Camel camel-as2): asynchronous MDN SSRF + credential disclosure — the receiver delivers the MDN to the sender-chosen Receipt-Delivery-Option, presenting its credentials to an attacker-chosen host — Camel Spring Boot + Camel Quarkus

PoC: CVE-2026-64560-sources

Corresponding source for the CVE-2026-64560 public binaries

PoC: hdu-is-lab1-secure-api

HDU IS Lab Work 1: secure Flask REST API with CI/CD and CVE-2024-23334 analysis

PoC: CVE-2026-99999-pwnescape

CVE-2026-99999 (PwnEscape) reproduction: IPv4 csum_start validation bug — IHL rewrite and 32-byte kernel heap disclosure

PoC: InfinityCore-Android-CVE-2026-97941

Android/ARM64 port

PoC: InfinityCore-Android-CVE-2026-98385

Android/ARM64 port

PoC: InfinityCore-Android-CVE-2026-80775

Android/ARM64 port

PoC: InfinityCore-Android-CVE-2026-89754

Android/ARM64 port

PoC: InfinityCore-Android-CVE-2026-98256

Android/ARM64 port

PoC: CVE-2025-3248-CTF-Lab

Langflow 미인증 RCE 취약점(CVE-2025-3248) 기반 경량화 웹 해킹 CTF 문제 및 PoC 실습 환경

PoC: Threat-Hunt-EchoLeak-Copilot-Prompt-Injection-Sentinel-KQL-Oct-2026

Threat hunt reconstructing an M365 Copilot indirect prompt injection (CVE-2025-32711 "EchoLeak"): poisoned email attachment, Graph API data collection, markdown-image exfiltration, and system prompt leakage. Sentinel + KQL across Office, Copilot and Entra telemetry. 17/17 flags.

PoC: CVE-2026-104736

PoC for CVE-2026-104736 — LearnPress ≤4.4.10 unauthenticated PHP object injection via checkout-email (lp-ajax=checkout). Check + exploit. Authorized testing only.

PoC: mariadb-cve-2026-92262

PoC for CVE-2026-92262, CVE-2026-85746, CVE-2026-85748 against MariaDB 13.0.1

PoC: DirtyFrag

DirtyFrag - ephemeral root via CVE-2026-43284 page-cache exploit (synced from mitschud/DirtyFrag)

PoC: boboverflow

CVE-2026-39127 - pre-auth RCE on the Minions Bob router

PoC: lpe-study-notes

A slow, from-zero walk through a Linux kernel privilege-escalation bug (CVE-2026-98260)

PoC: OMOTOSO-AYOBAMI

CVE-2022-30190

PoC: CVE-2026-53787-poc

CVE-2026-53787 Amasty Order Attribute (AOA) file upload exploit, modified to support the upload of HTML files instead of TXT files.

PoC: mcp-patch-gap-scanner

Deterministic CVE patch-gap reports for MCP servers (Oct 2026 cluster: Langflow RCE CVE-2026-105697, fetch SSRF CVE-2026-104120, x64dbg CVE-2026-107824, MCP SDK OAuth theft)

PoC: CVE-2026-98180

CVE-2026-98180 — drm/msm use-after-free of the scheduler-containing ring and VM objects (fixed by 01c8d1f385f7)

PoC: CVE-2025-53051

proof of concept for CVE-2025-53051

PoC: Def4cer

A Secure Version of CVE-2026-53787 Amasty Order Attribute File Upload Exploit,with the modification of file upload of txt to html.

PoC: CVE-2020-36847

PoC for CVE-2020-36847: unauthenticated file upload to RCE in WordPress Simple File List <=4.2.2. Uploads PHP as .png, renames to .php via ee-file-engine.php, verifies execution. Single target or batch mode. K52-ai.

PoC: CVE-2024-25600

PoC for CVE-2024-25600: unauthenticated RCE in WordPress Bricks Builder <=1.9.6. Extracts the render_element nonce, probes both REST endpoints, confirms exploitability, and opens an interactive shell. Usage: python3 bricks_rce.py -u <target>.

PoC: chatml-role-token-probe

Fire ChatML/Mistral/Llama control-token literals at your self-hosted agent stack and prove role-forgery before an attacker does (CVE-2026-61732).

PoC: CVE-2026-99999

CVE-2026-99999 PwnEscape PoC - Linux kernel IPv4 csum_start validation bug guest-to-host memory leak (CVSS 9.3)

PoC: CVE-2026-80343

Reproducer for CVE-2026-80343 (Apache Camel camel-netty-http): security constraint case-sensitivity bypass — altering the path case skips the constraint while routing still dispatches to the protected endpoint — Camel Spring Boot + Camel Quarkus

PoC: CVE-2026-58221

CVE-2026-58221 — Samba AD Domain Takeover / DoS (CVSS 8.8)

PoC: kpatch-alma-cve-2026-99999

kpatch livepatch build for CVE-2026-99999 on AlmaLinux 8/9 GA kernels

PoC: plex-codec-cache-implant

Incident write-up: unsigned .so in the Plex Media Server codec cache executes a dropper on every transcode (CVE-2026-96656) — IOCs, STIX, YARA

PoC: CVE-2026-80312

Reproducer for CVE-2026-80312 (Apache Camel camel-oauth): fail-open authentication guard — the OAuth processors returned control to the route instead of terminating when auth could not complete — Camel Spring Boot + Camel Quarkus

PoC: Sony-XBR-65X850D

Root & persistence research on a Sony XBR-65X850D / SVP-DTV15 (MT5890, Android 8.0): CVE-2022-22706 page-cache write -> targeted setresuid patch -> reboot-surviving uid-0 root console

PoC: NalCaller

CVE-2015-2291 PoC: Arbitrary Kernel Calls via Intel NAL

PoC: plex2shell

CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656

PoC: reprokit-go-git-cve-2026-71557-lab

Reviewed isolated comparison lab for CVE-2026-71557

PoC: vghost-watch

Passive internet-wide discovery + responsible-disclosure helper for CVE-2026-74580 (Linux vhost metadata-cache bug) — queries existing scan data (Sonar/Shodan/Censys), triages exposure, and drafts (never auto-sends) notices to owners.

PoC: CVE-2026-53995-mlflow-path-traversal

MLflow <=3.17.1 path traversal allows trace file writes outside the intended directory.

PoC: mikrotrick-verifier

Non-destructive behavioral verifier for the MikroTik RouterOS SSH auth-bypass (CVE-2026-67279 / MikroTrick). Measures server reaction only — no exploit payload.

PoC: iqoo-neo9-ghostlock-pc

GhostLock (CVE-2026-43499) PC-side driver for iQOO Neo9 (PD2338): boot-window campaign over adb, temporary root via KernelSU late-load. One bash script + one payload pack.

PoC: apache_poc

CVE-2024-38475

PoC: CVE-2026-38838

Path traversal (CWE-22) in the Akai MPC Sample built-in web server CVE-2026-38838

PoC: Vulnerability-Analysis-and-Mitigation

Vulnerability analysis, exploitation, and multi-layered defense hardening for Apache Struts 2 (CVE-2017-5638) & Windows Print Spooler / PrintNightmare (CVE-2021-34527) with ELK SIEM monitoring and Windows Event Log auditing.

PoC: CVE-2026-94169

WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability

PoC: cve-2026-97229-lab

CVE-2026-97229 GitLab CI lint regex integer overflow RCE — InstaBox version matrix reproduction & libruby gadget reverse engineering

PoC: mcp-oauth-discovery-prober

Probe MCP OAuth discovery issuer validation (CVE-2026-104850 class)

PoC: CVE-2026-111437-Denial-of-Service-Advisory-Technical-Report

Official security advisory and technical report for CVE-2026-111437: CPU resource exhaustion and Denial of Service (DoS) in django-import-export (v2.7.0 to v4.4.1) via unvalidated integer conversion in IntegerWidget.clean()

PoC: CVE-2024-32507

CVE-2024-32507: login-with-phone-number Unauthenticated Password Reset (Account Takeover)

PoC: cve-2026-64560-rmx6699

CVE-2026-64560 temporary-root exploit for realme RMX6699 (Snapdragon 8 Elite, kernel 6.6.118, Android 17/COOS17)

PoC: prague-CVE-2026-64560-OS4.0

REDMI K90 Max在OS4.0.0.14.XAACNXM利用CVE-2026-64560获取ROOT权限。

PoC: CVE-2026-111823

PoC for CVE-2026-111823 — Mage AI OAuth session auth bypass (POST /api/sessions). Check + exploit modes. Authorized testing only.

PoC: cve-2026-99999-audit

cve-2026-99999-audit script (PwnEscape)

PoC: pmx110-cve-2026-64560

PMX110 (OPPO MT6995, kernel 6.18.21) CVE-2026-64560 research: port, evidence, bounded run scripts

PoC: CVE-2026-99999

PoC for CVE-2026-99999 (PwnEscape) on a prepared TAP.

PoC: CVE-2026-89282

CVE-2026-89282: Apache Lounge Windows DLL Search Order Hijack → SYSTEM LPE PoC

PoC: CVE-2026-27280

Write up and PoC for CVE-2026-27280

PoC: cve-2025-54068-vuln-intel

Inteligencia de vulnerabilidade sobre o RCE no Laravel Livewire: CVSS v4 do zero e priorizacao com EPSS/KEV.

PoC: hlk-al00-kernel-build

HLK-AL00 (4.14.116 / Kirin 810) 内核云编译 — CVE-2026-43499 授权安全研究

PoC: cybersecurity

Projet de Cybersécurité (TP1 à TP9) Recherche réseau (Nmap, Scapy) • Attaques DDoS (hping3) • Force brute (Hydra, LaZagne) • Ingénierie sociale (Zphisher, Gophish) • Sécurité Wi-Fi (Airgeddon, Aircrack-ng) • Malwares (msfvenom) • Injection de code (Shellter) • MITM (Ettercap, Yersinia) • Vulnérabilités (CVE-2026-96889).

PoC: CVE-2026-107084

CSRF in SLiMS 9.8.0 loan history maintenance allowing unauthorized data loss (TRUNCATE). CVE-2026-107084.

PoC: CVE-2026-107083

SQL Injection via unquoted numeric concatenation in SLiMS 9.8.0 admin modules (subscription.php & dl_detail.php). CVE-2026-107083.

PoC: plex2shell

CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656

PoC: qemu-xhci-complete-uaf

QEMU 11.1.2 - High - Local - UAF - xhci_complete leftover of CVE-2026-17588 doorbell DMA

PoC: CVE-2026-107082

SQL Injection via opac_hide / promoted GET parameters in SLiMS 9.8.0 admin bibliography module. CVE-2026-107082.

PoC: qemu-nvme-sgl-bar

QEMU 11.1.2 - High - Local - UAF - NVMe SGL span into BAR0 incomplete CVE-2021-3929

PoC: cve-2026-111283-bmc-helix-network-management-local-administrator-any-password

CVE-2026-111283 - BMC Helix Network Management Local Administrator Account Accepts Any Password

PoC: CVE-2026-59970-poc

PoC for CVE-2026-59970 Blind SSRF in Tandoor Recipes, CWE-918

PoC: CVE-2026-31431-Copy-Fail

CVE-2026-31431 Exploit | by infrar3d

PoC: CVE-2014-6271-Shellshock

CVE-2014-6271 Exploit | by infrar3d

PoC: CVE-2025-55182-React2Shell

CVE-2025-55182 Exploit | by infrar3d

PoC: CVE-2026-38526-KrayinCRM-RCE

CVE-2026-38526 Exploit | by infrar3d

PoC: CVE-2026-33017-Langflow-RCE

CVE-2026-33017 Exploit | by infrar3d

PoC: CVE-2026-39987-Marimo-RCE

CVE-2026-39987 Exploit | by infrar3d

PoC: infosec-audit-tools

Ferramentas de auditoria em segurança da informação, reconhecimento de superfície com RDAP/DNS e análise defensiva web (CVE-2024-10924).

PoC: CVE-2026-102764-Proof-of-concept

CVE-2026-102764 BeyondTrust Remote Support unauthenticated file write / RCE proof of concept

PoC: sharepoint-zero-day-cs50-cybersecurity

CS50 Cybersecurity Final Project - Analysis of CVE-2025-53770 SharePoint Zero-Day Attacks

PoC: csumguard

Restricted eBPF TC ingress guard, CO-RE detector, verified loader, and C11 VMM launch supervisor for CVE-2026-99999

PoC: plex2shell

CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656

PoC: CVE-2026-92209_NoMachine_LPE

CVE-2026-92209

PoC: CVE-2026-92208_remote_mDNS_overflow

CVE-2026-92208

PoC: POC-CVE-2026-94134

Exploitation POC for CVE-2026-94134

PoC: CVE-2026-79986

Reproducer for CVE-2026-79986 (Apache Camel camel-azure-files): the consumer builds the remote path from the share listing without containment (author-only; see CVE-2026-79983/79984 for the runnable mechanism) — Camel Spring Boot + Camel Quarkus

PoC: redcap_cve_2026_90817_scan

A read-only, passive scanner that checks a REDCap host for exposure to and compromise by **CVE-2026-90817** — the unauthenticated survey-endpoint remote-code-execution flaw abused by the XMRig cryptomining campaign documented by Palo Alto Unit 42

PoC: CVE-2026-79985

Reproducer for CVE-2026-79985 (Apache Camel camel-smb): the SMB consumer builds the remote path from the share listing without containment (author-only; see CVE-2026-79983/79984 for the runnable mechanism) — Camel Spring Boot + Camel Quarkus

PoC: CVE-2026-79984

Reproducer for CVE-2026-79984 (Apache Camel camel-mina-sftp): the consumer builds the remote path from the server's SFTP directory listing without containment, escaping the polled directory — Camel Spring Boot + Camel Quarkus

PoC: exiftool-7.44-12.23-exploit-CVE-2021-22204-

ExifToolExploit CVE-2021-22204 \\ Arbitrary Code Execution

PoC: CVE-2026-79983

Reproducer for CVE-2026-79983 (Apache Camel camel-ftp): the consumer builds the remote path from the server's directory listing without containment, escaping the polled directory — Camel Spring Boot + Camel Quarkus

PoC: GhostLock-HonorFne

Honor 70 (FNE-AN00) privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading

PoC: CVE-2026-78165

Reproducer for CVE-2026-78165 (Apache Camel camel-spring-redis): default JdkSerializationRedisSerializer deserializes Redis PUBLISH payloads with no ObjectInputFilter (RCE) — Camel Spring Boot + Camel Quarkus

PoC: CVE-2026-78164

Reproducer for CVE-2026-78164 (Apache Camel HTTP producers): property placeholders resolved on the message-supplied CamelHttpUri/CamelRestHttpUri headers leak secrets into the outbound request — Camel Spring Boot + Camel Quarkus

PoC: CVE-2026-51367-Insecure-Direct-Object-Reference-IDOR

Security advisory — Insecure Direct Object Reference (IDOR / BOLA) in Vedo Suite (Bottinelli Informatica). Responsible disclosure.

PoC: CVE-2026-51366-SQL-Injection-leading-to-Remote-Code-Execution

Security advisory — SQL Injection leading to RCE in Vedo Suite (Bottinelli Informatica). Responsible disclosure.

PoC: CVE-2026-78163

Reproducer for CVE-2026-78163 (Apache Camel camel-docling): unvalidated String body input source enables SSRF and local file disclosure in DoclingProducer — Camel Spring Boot + Camel Quarkus