Duplicate Advisory: Unauthenticated Flow Execution via Webhook Authentication Bypass

PoC: CVE-2026-23111

CVE-2026-23111 nf_tables UAF exploit for Ubuntu 6.8.0-101-generic: unprivileged user → host root, plus container escape to the host.

PoC: CVE-2026-105810

CVE-2026-105810 TP-Link Tapo C320WS authenticated connectAp stack overflow (RCE as root)

PoC: CVE-2026-64560-public

CVE-2026-64560 staged security research package

PoC: xss2shell

CVE-2026-64638 | WordPress < 7.0.3 Pre-Auth Stored XSS → RCE

PoC: CVE-2011-2523-vsftpd-backdoor-analysis

A detailed cybersecurity analysis of CVE-2011-2523, a critical backdoor vulnerability associated with a compromised vsftpd 2.3.4 distribution in 2011. This repository explains the vulnerability, its technical mechanism, severity, potential impact, software supply-chain risks, and recommended mitigation strategies for educational purposes.

PoC: InfinityCore-Android-CVE-2026-98260

CVE-2026-98260 (Timer) Android/ARM64 port

PoC: php2shell

PHP2Shell Censys Query (CVE-2026-109618 / CVE-2026-109619 )

PoC: BABEF

This framework has been RE-WEAPONIZED & exploits CVE-2026-44714, a critical signature verification flaw in the bitcoinj library (Java implementation of the Bitcoin protocol). Unpatched applications are vulnerable to transaction spoofing, allowing attackers to:

PoC: JIMOH-ABDULLAHI

CVE-2021-26855 – MicrosoftExchange Server RCE(ProxyLogon)

PoC: cve-2018-16763

cve-2018-16763-exploit

PoC: cve-2026-62911

cve-2026-62911-exploit

PoC: NEO-DEFENDER

This framework has been **RE-WEAPONIZED** & exploits CVE-2026-33825, a local privilege escalation (LPE) vulnerability in Microsoft Defender caused by insufficient access control granularity. The exploit:

PoC: MARABUSE-

MARIMO RCE & NKABUSE EXPLOIT FRAMEWORK (CVE-2026-39987) - RE-WEAPONIZED - This framework exploits CVE-2026-39987, a critical Remote Code Execution (RCE) vulnerability in Marimo, a popular Python-based data visualization tool. Attackers actively exploit this flaw to deploy NKAbuse, a blockchain-based botnet malware.

PoC: CVE-2026-86950-POC

Proof of Concept for CVE-2026-86950

PoC: CVE-2026-72867

Working, stdlib-only PoC. A low-privileged authenticated user stores a shell palistener

PoC: CVE-2026-87690-POC

Exploit and writeup for CVE-2026-87690

PoC: CVE-2026-23744

exploit RCE (Remote Code Exec) <= v1.4.2

PoC: CVE-2026-113468

forgeable PayPal payment callback in TYPO3 EXT:shop

PoC: CVE-2026-112071

unauthenticated order cancellation in TYPO3 EXT:shop

PoC: CVE-2025-5243-SMG-Software-Information-Portal-Arbitrary-File-Upload-Vulnerability

CVE-2025-5243 - Arbitrary File Upload / OS Command Injection in SMG Software Information Portal (CVSS 10.0)

PoC: CVE-2024-11142-Gosoft-Proticaret-E-Commerce-CSRF-Vulnerability

CVE-2024-11142 - CSRF in Gosoft Software Proticaret E-Commerce (CVSS 8.8)

PoC: CVE-2026-108097

CVE-2026-108097

PoC: forkybot_AI

Fork optimizado de Bytebot: Agente de IA para control de escritorio. Reducido de 7GB a 1.09GB, parcheada CVE-2026-78250, con documentación viva (Obsidian) y protocolo de trabajo Human-in-the-loop.

PoC: secure-demo-api

Work 1 — secure Flask REST API with CI/CD (bandit, pip-audit) and a CVE-2021-41773 analysis

PoC: Linux-Privilege-Escalation-Pentest-Lab

Linux penetration testing lab: reverse shell, SUID privilege escalation, NFS misconfiguration, writable /etc/passwd, PATH hijacking, and PwnKit (CVE-2021-4034), with evidence and remediation.

PoC: CVE-2026-106173

CVE-2026-106173

PoC: CVE-2026-85314

Reproducer for CVE-2026-85314 — Apache Camel camel-mail MimeMultipart mail.smtp header injection (CWE-20). Camel Spring Boot + Camel Quarkus.

PoC: CVE-2026-85313

Reproducer for CVE-2026-85313 — Apache Camel camel-jetty enableCORS credentialed any-origin CORS (CWE-942). Camel Spring Boot.

PoC: CVE-2026-106173

Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM

PoC: CVE-2026-85312

Reproducer for CVE-2026-85312 — Apache Camel camel-core saga hijacking via the Long-Running-Action header (CWE-20). Camel Spring Boot + Camel Quarkus.

PoC: CVE-2026-85301

Reproducer for CVE-2026-85301 — Apache Camel camel-keycloak issuer validation bypass (CWE-287). Camel Spring Boot + Camel Quarkus.

PoC: old-phone-temp-root

利用CVE-2019-2215给小米5获取临时root（比较通用？）

PoC: CYB-401-

Details of CVE-2022-3509 vulnerability

PoC: OnePlus16-Jailbreak

OnePlus 16 (PYB110) jailbreak: CVE-2026-64560 + KernelSU / KernelSU Next / BakaSU / SukiSU Ultra LKM

PoC: CVE-2026-85300

Reproducer for CVE-2026-85300 — Apache Camel camel-pqc private key written with permissive file permissions (CWE-276); Spring Boot + Quarkus, affected vs fixed

PoC: CVE-2026-85296

Reproducer for CVE-2026-85296 — Apache Camel camel-as2 cross-partner MDN signing key confusion (CWE-488); Spring Boot + Quarkus, affected vs fixed

PoC: CVE-2026-105484

Research attribution and coordinated disclosure status for CVE-2026-105484.

PoC: CVE-2026-99999-exploit

CVE-2026-99999 Working PoC — real VM escape for Linux kernel csum_start bug (CVSS 9.3). Guest-to-Host heap leak. See also: CVE-2026-99999-analysis (Educational).

PoC: CVE-2026-99999-analysis

CVE-2026-99999 Educational Analysis — attack chain simulation of Linux kernel csum_start bug (CVSS 9.3). See also: CVE-2026-99999-exploit (Working PoC).

PoC: log4shell-audit-2026

Log4Shell (CVE-2021-44228) audit findings and Actions smoke-test workflow

PoC: CVE-2026-85260

Reproducer for CVE-2026-85260 — Apache Camel camel-mllp protected health information logging (CWE-532); Spring Boot + Quarkus, affected vs fixed

PoC: CYB-403

AN ASSIGMENT ON CVE-2025-31324 SAP NETWEAVER UNAUTHENTICATED RCE

PoC: CVE-2025-5548

Laboratorio de análisis y explotación de la vulnerabilidad CVE-2025-5548

PoC: M3-Neo10-Root-ADB-OS6

iQOO Neo10 (PD2425) 免解BL锁临时Root一键工具（电脑ADB版，基于 GhostLock / CVE-2026-43499）

PoC: cve-2026-99999-scanner

Checks whether a Linux system is affected by CVE-2026-99999 (PwnEscape) and prints or applies the distribution-specific kernel fix

PoC: CVE-2026-111058-CVE-2026-111057-mercury-rce

Mercury unauth RCE combo: CVE-2026-111058 (kernels) + CVE-2026-111057 (terminals). By 0xNuts (@ExDev994). Authorized testing only.

PoC: plex2shell-check

Read-only Linux check for Plex2Shell (CVE-2026-96652/-96654/-96655/-96656) exploitation and the XMRig/proxy payloads seen in the wild

PoC: work1-secure-rest-api

Secure REST API with CI/CD and CVE-2021-41773 analysis

PoC: security-triage-agent-cybersec590

CYBERSEC 590 group project. Agent that rates CVE-2024-21762 risk for a FortiOS VPN gateway.

PoC: home-network-security-assessment

Home network security assessment identifying CVE-2017-7494 SambaCry and implementing VLAN segmentation

PoC: stunning-octo-doodle

CVE-2026-81963 - It is rated as "Important" by Microsoft. CVE-2026-85880 - CVE-2026-69414 -

PoC: CVE-2026-85257

Reproducer for CVE-2026-85257 — Apache Camel camel-cxf SOAP fault information disclosure (CWE-209); Spring Boot + Quarkus, affected vs fixed

PoC: eternalblue-ms17010-study

An isolated-lab study of EternalBlue (MS17-010 / CVE-2017-0144)

PoC: CVE-2026-85254

Reproducer for CVE-2026-85254 — Apache Camel camel-platform-http request-header echo suppression bypass (CWE-178); Spring Boot + Quarkus, affected vs fixed

PoC: CVE-2026-85251

Reproducer for CVE-2026-85251 — Apache Camel camel-http credential disclosure on redirect (CWE-200); Spring Boot, affected vs fixed

PoC: CVE-2024-58299

This repository deals with the PCMan FTP Server 2.0 'pwd' buffer overflow issue.

PoC: CVE-2026-52856-PoC

PoC For CVE-2026-52856

PoC: FastJson1.2.83-GenProbe2

CVE-2026-16723 reproduction toolkit - fastjson 1.2.83 jar: remote class-loading payload generator (ASM-built POC.class with @JSONType + clinit exec)

PoC: log4shell-remediation

Log4Shell (CVE-2021-44228) remediation paperwork and log4j-core advisory audit for the payments service

PoC: CVE-2026-105105

CVE-2026-105105 - NASA-AMMOS AIT-Core unauthenticated ZeroMQ command/telemetry bus (CWE-306, CVSS 9.8). Responsible scanner + loopback-only lab PoC.

PoC: CVE-2024-27198-Assignment

Cybersecurity assignment on CVE-2024-27198

PoC: CVE-2026-85250

Reproducer for CVE-2026-85250 — Apache Camel camel-xpath XML external entity processing via documentType=InputSource (CWE-611); Spring Boot + Quarkus, affected vs fixed

PoC: CVE-2026-22747

Sprint Security 7.0.0 à 7.0.4

PoC: CVE-2026-85249

Reproducer for CVE-2026-85249 — Apache Camel camel-tika metadata header injection (CWE-20); Spring Boot + Quarkus, affected vs fixed

PoC: kpatch-rocky-cve-2026-99999

kpatch livepatch build and load test for CVE-2026-99999 on Rocky Linux 8.10 (4.18.0-553.144.1.el8_10)

PoC: CVE-2024-12603-POC

XOS AppLock (com.transsion.applock v1.1.0.199) security assessment - findings X697-020..023, Infinix X697 firmware audit.

PoC: CVE-2026-43499-ghostlock-vivo-x100-ultra-root

GhostLock: Android kernel root exploit for Vivo X100 Ultra (PD2366) via CVE-2026-43499 PI-futex race. KernelSU integration with vr.ko anti-root bypass.

PoC: Progetto-sicurezza

Penetration test white-box su un’app Laravel: analisi Cyber Kill Chain, RCE via file upload bypass (CVE-2025-27515), exfiltration e remediation.

PoC: CVE-2026-85248

Reproducer for CVE-2026-85248 — Apache Camel camel-pqc concurrent Signature race / verification bypass (CWE-362); Spring Boot + Quarkus, affected vs fixed

PoC: hdu-is-work1-secure-flask-api

HDU Information Security Work 1: secure Flask REST API, CI security scans, and Nginx CVE-2017-7529 analysis.

PoC: CVE-2026-85247

Reproducer for CVE-2026-85247 — Apache Camel camel-knative improper certificate validation (CWE-295); Spring Boot + Quarkus, affected vs fixed

PoC: CVE-2026-85246

Reproducer for CVE-2026-85246 — Apache Camel camel-mina consumer information disclosure (CWE-209); Spring Boot, affected vs fixed

PoC: CVE-2026-54121-Certighost

🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.

PoC: CVE-2026-85245

Reproducer for CVE-2026-85245 — Apache Camel camel-thrift cross-exchange data disclosure (CWE-488); Spring Boot, affected vs fixed

PoC: CVE-2026-85243

Reproducer for CVE-2026-85243 — Apache Camel camel-crypto-pgp integrity verification downgrade (CWE-354); Spring Boot + Quarkus, affected vs fixed

PoC: CVE-2024-6387-Vulnerability-Anaysis

Cyber Security Assignment analyzing CVE-2024-6387, its severity, patch and etc

PoC: CVE-2026-84181

Reproducer for CVE-2026-84181 — Apache Camel camel-shiro thread-bound-subject authentication bypass (CWE-287); Spring Boot + Quarkus, affected vs fixed

PoC: GalaxyCrash

Ephemeral root for Samsung Galaxy devices via CVE-2026-43284 — stability fork of DirtyFrag. Reboot to undo.

PoC: CVE-2026-84180

Reproducer for CVE-2026-84180 — Apache Camel camel-knative HTTP consumer information disclosure (CWE-209); Spring Boot + Quarkus, affected vs fixed

PoC: hdu-is-work1-secure-api

Secure REST API with CI security scanning and CVE-2021-41773 reproduction/fix

PoC: Dirty-cow

CVE-2016-5195 Dirty COW analysis using the Cyber Kill Chain.

PoC: CVE-2026-84178

Reproducer for CVE-2026-84178 (Apache Camel camel-oauth): the authorization-code callback redeems the code without verifying a state parameter (login CSRF) — Camel Spring Boot + Camel Quarkus

PoC: CVE-2024-3400-Vulnerability-Analysis

Cybersecurity assignment analysing CVE-2024-3400, its severity, patch, Cyber Kill Chain, and incident response.

PoC: CVE-2026-84176

Reproducer for CVE-2026-84176 (Apache Camel camel-platform-http-vertx): CORS handler sends Access-Control-Allow-Credentials: true outside the origin check and reflects the Origin when no origins are configured (credentialed any-origin) — Camel Spring Boot

PoC: CVE-2023-20198-Cisco-IOS-XE

Adedayo Samuel, RUN/CYB/24/18075

PoC: CVE-2026-83531

Reproducer for CVE-2026-83531 (Apache Camel camel-dynamic-router): the dynamic-router-control endpoint compiles an attacker-supplied predicate expression/language from the control message (expression-language / code injection) — Camel Spring Boot

PoC: CVE-2026-80344

Reproducer for CVE-2026-80344 (Apache Camel camel-as2): asynchronous MDN SSRF + credential disclosure — the receiver delivers the MDN to the sender-chosen Receipt-Delivery-Option, presenting its credentials to an attacker-chosen host — Camel Spring Boot + Camel Quarkus

PoC: cve-2023-4911-looney-tunables

Research for CYB 401

PoC: CVE-2026-64560-sources

Corresponding source for the CVE-2026-64560 public binaries

PoC: hdu-is-lab1-secure-api

HDU IS Lab Work 1: secure Flask REST API with CI/CD and CVE-2024-23334 analysis

PoC: CVE-2026-99999-pwnescape

CVE-2026-99999 (PwnEscape) reproduction: IPv4 csum_start validation bug — IHL rewrite and 32-byte kernel heap disclosure

PoC: InfinityCore-Android-CVE-2026-97941

Android/ARM64 port

PoC: InfinityCore-Android-CVE-2026-98385

Android/ARM64 port

PoC: InfinityCore-Android-CVE-2026-80775

Android/ARM64 port

PoC: InfinityCore-Android-CVE-2026-89754

Android/ARM64 port

PoC: InfinityCore-Android-CVE-2026-98256

Android/ARM64 port

PoC: CVE-2025-3248-CTF-Lab

Langflow 미인증 RCE 취약점(CVE-2025-3248) 기반 경량화 웹 해킹 CTF 문제 및 PoC 실습 환경

PoC: Threat-Hunt-EchoLeak-Copilot-Prompt-Injection-Sentinel-KQL-Oct-2026

Threat hunt reconstructing an M365 Copilot indirect prompt injection (CVE-2025-32711 "EchoLeak"): poisoned email attachment, Graph API data collection, markdown-image exfiltration, and system prompt leakage. Sentinel + KQL across Office, Copilot and Entra telemetry. 17/17 flags.

PoC: CVE-2026-98260-android

a complete exploit chain for CVE-2026-982600,

PoC: CVE-2026-104736

PoC for CVE-2026-104736 — LearnPress ≤4.4.10 unauthenticated PHP object injection via checkout-email (lp-ajax=checkout). Check + exploit. Authorized testing only.