169841 matches found
copyfail-go
CopyFail Go Most Linux LPEs need a race window or a kernel-specific offset. Copy Fail is a straight-line logic flaw — it needs neither. The same 732-byte Python script static Go binary roots every Linux distribution shipped since 2017. A Go implementation of CVE-2026-31431. In case you need a...
CVE-2026-56291_PoC
This repository does not have a README...
PISmith
PIForge An Open Framework for RL-based Prompt Injection Red Teaming 💻 Code · 🤗 Models · 📜 Papers PIForge is the shared codebase for PISmith and Climbing the Hill. PISmith addresses the sparse reward problem in prompt injection red teaming, helping RL attackers explore and learn from rare successf...
wp2shell-scan
wp2shell-scan Detect and clean upwp2shell CVE‑2026‑63030 compromise across one or many WordPress sites. wp2shell is the pre‑authentication remote‑code‑execution vulnerability fixed in WordPress 7.0.2 / 6.9.5 / 6.8.6 2026‑07‑17. A public PoC appeared within a day and mass‑exploitation followed...
By-Poloss..-..CVE-2026-48939
CVE-2026-48939 - iCagenda Unauthenticated File Upload to RCE Overview Field| Value ---|--- CVE ID| CVE-2026-48939 CVSS 4.0 Score| 10.0 Critical CVSS Vector| CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE| CWE-284: Improper Access Control Affected Versions| iCagenda 3.2.1 -...
Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag
Local Privilege Escalation Report — Dirty Frag Student: Jonatan Claudio 1. Requirements Methodology Summary A vulnerability assessment was performed on a virtual machine running Kali Linux using a detection script for the Dirty Frag vulnerability, associated with the following CVEs: CVE-2026-4328...
0xKern3lCrush
0xKern3lCrush Windows BYOVD research on two real cases: the Safetica ProcessMonitorDriver CVE-2026-0828 and the ThrottleStop driver abused by MedusaLocker CVE-2025-7771. The repository documents the exposed interfaces, the privileged outcome each one reaches, and how to detect the abuse. It ships...
defender-privilege-escalation-scanner
Defender Vulnerability Scanner Microsoft Defender vulnerability scanner — CVE-2026-41091 / CVE-2026-45498 Detects security weaknesses in Microsoft Defender deployments. For authorized security testing only. Features CVE-2026-41091 detection CVE-2026-45498 detection Microsoft Defender posture...
CVE-2026-15409
cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...
CVE-2026-14191
cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...
wp2shell
wp2shell-check Non-intrusive checker for CVE-2026-63030 / CVE-2026-60137 "wp2shell", a pre-authentication RCE chain in WordPress core REST API batch-route confusion → SQL injection → RCE. Affected: WordPress 6.9.0–6.9.4, 7.0.0–7.0.1, 7.1 beta full RCE chain; 6.8.0–6.8.5 SQL injection only,...
CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project
CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project The project documents the completion and analysis of the Fragnesia CVE-2026-46300 TryHackME lab, which demonstrates a Linux kernel page -cache corruption vulnerability capable of achieving local privilege escalation through modification of cached...
slides
HyperDbg Slides Presentation slides from talks and research on HyperDbg. Slides by Year 2022 2023 2024 2025 2026...
copy-fail-tiny-elf-CVE-2026-31431
Copy Fail Tiny ELF - CVE-2026-31431 Minimal 436-bytes exploit for Copy Fail, thanks to the power of golfing Magic This ELF ultra golfs the exploit by being totally unmapped, rwx, and by using itself conditionally as the ELF payload to use to poison the cache. More cursed ELF internals golfs comin...
AxHunter
AxHunter PoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family — xhunter1.sys v2023.12.7.78 CVE-2026-3609 and xhunter2.sys v2026.6.1.192 CVE-2026-15430. Workspace layout Cargo workspace, three crates: AxHunter/ ├── Cargo.toml workspace manifest ├── axhunter-lsa/ shared crate — driver-agnost...
tanstack-compromise-checker
tanstack-compromise-checker ⚠️ Disclaimer: This tool was built for my own use case. All indicators are derived from the following advisory sources: GHSA-g7cv-rxg3-hmpx Snyk: TanStack npm packages compromised StepSecurity: Mini Shai-Hulud deep dive If new IOCs, payload variants, or attacker...
CVE-2026-8196
This repository does not have a README...
ResetNightmare
ResetNightmare Proof-of-concept POC tool for ResetNightmare CVE-2026-27912. ResetNightmare is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched...
CVE-2026-41901
CVE-2026-41901 ⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in...