cve-2026-41940-poc

This repository does not have a README...

smt878u-ionstack-poc

smt878u-ionstack-poc !CAUTION THIS PROJECT IS UNFINISHED — IT DOES NOT WORK YET. There is no working root on any device as of 2026-10-06. Do not expect the quick-start below to succeed. Read Current status before building or running anything. !WARNING STATUS: WORK IN PROGRESS — ring 1 not landed...

cve-2026-61511

This repository does not have a README...

CVE-2026-39902 Cacti: Authenticated RCE on Data Input

Cacti is an open source performance and fault management framework. Prior to version 1.2.31, the prior blocklist ;&| $\n\r omitted single-quote, double-quote, redirect operators, subshell parens and braces. An authenticated admin could save an inputstring containing single-quote, redirect...

CVE-2026-43499_x86_Exploit

This repository does not have a README...

cve_2026_31431

CVE-2026-31431 "Copy Fail" Toolkit Detector and proof-of-concept LPE for the Linux algifaead / authencesn page-cache scratch-write bug disclosed 2026-04-29. Disclosure writeup: https://xint.io/blog/copy-fail-linux-distributions Authorization Use only on hosts you own or are explicitly engaged to...

WinDefenderKiller

WinDefenderKiller PermanentDisablefromRegistry C++ Code for Permanently Disabling Windows Defender via Registry Keys Just compile and execute it! And when i restart it: BYOVDWindowsDefenderKiller This module implements a BYOVD Bring Your Own Vulnerable Driver technique to disable Windows Defender...

NGINX_RIFT_SCAN_CVE_2026_42945

NGINX Rift Config Scanner Language: 中文 | English This is a lightweight scanner for checking whether an NGINX configuration contains risky CVE-2026-42945, also known as NGINX Rift, and CVE-2026-9256 configuration patterns. The issue was disclosed by depthfirst in NGINX Rift: Achieving NGINX RCE vi...

CVE-2026-49160-CVE-2026-47291-HTTP.sys

CVE-2026-49160 & CVE-2026-47291 HTTP.sys PoC HTTP.sys Denial of Service Vulnerability HTTP.sys Remote Code Execution Vulnerability Due to GitHub's file size restrictions, demonstration videos for this PoC CVE-2026-49160 are hosted as attachments in the Releases. CVE-2026-47291 Vulnerable code: if...

DarkReplica

DarkReplica CVE-2026-23631 Redis Post-Auth RCE Exploit The full technical writeup can be found here: https://www.zeroday.cloud/blog/redis-cve-2026-23631-dark-replica...

Januscape

Januscape: Guest-to-Host Escape in KVM/x86 Abstract This document describes the Januscape CVE-2026-53359 vulnerability discovered and reported by Hyunwoo Kim @v4bel. It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/x86 environment. To the best of public knowledge, th...

CVE-2026-43499-Poc-Analysis

CVE-2026-43499 Android arm64 Local Privilege Escalation Adaptation English | 中文 This is an Android arm64 local privilege escalation adaptation project for CVE-2026-43499. The project generates a target-specific target.h from the target device's boot.img and profile, then builds the corresponding...

fastjson-rce-lab

Fastjson 1.2.83 RCE Lab Environment CVE-2026-16723 Disclaimer: This lab is intended solely for security research, teaching demonstrations, and defense construction in authorized environments. Testing unauthorized targets without permission may be illegal; users bear all responsibility for the...

POCO-M7-Plus-Jailbreak

POCO M7 Plus SM6375 - Jailbreak Root Research Disclaimer: This document is written purely for educational and security research purposes. All testing was performed on my own device. I am not responsible for bricked devices, data loss, or misuse of this information. The vulnerabilities discussed...

CVE-2026-53587

This repository does not have a README...

cve-2026-43499-app.s0

cve-2026-43499-app.s0...

copy-fail-check

copy-fail-check CVE-2026-31431 Helper based on https://copy.fail/ Copy Fail Quick Check Interactive bash helper to review basic exposure related to CVE-2026-31431 Copy Fail and apply a temporary mitigation based on algifaead. Target compatibility Mainly intended for: Debian / Ubuntu AlmaLinux /...

CVE-2026-6440

This repository does not have a README...

AxHunter

AxHunter PoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family — xhunter1.sys v2023.12.7.78 CVE-2026-3609 and xhunter2.sys v2026.6.1.192 CVE-2026-15430. Workspace layout Cargo workspace, three crates: AxHunter/ ├── Cargo.toml workspace manifest ├── axhunter-lsa/ shared crate — driver-agnost...

mitm6

mitm6 mitm6 is a pentesting tool that exploits the default configuration of Windows to take over the default DNS server. It does this by replying to DHCPv6 messages, providing victims with a link-local IPv6 address and setting the attackers host as default DNS server. As DNS server, mitm6 will...