gichirimaku / wp2shell-PoC

CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.

jburgess-r7 / CVE-2026-97229-PoC

GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image

ArchiveBox / ArchiveBox

🗃 Open source self-hosted web archiving. Takes URLs/browser history/bookmarks/Pocket/Pinboard/etc., saves HTML, JS, PDFs, media, and more...

kyutai-labs / pocket-tts

A TTS that fits in your CPU (and pocket)

mikel-brostrom / boxmot

BoxMOT: Pluggable Python and C++ SOTA multi-object tracking modules with support for axis-aligned and oriented bounding boxes

lintsinghua / DeepAudit

DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。

FujiwaraChoki / supoclip

An open-source OpusClip alternative

MiForge / MiUnlockTool

MiUnlockTool developed to retrieve encryptData(token) for Xiaomi devices for unlocking bootloader, It is compatible with all platforms.

0xMarcio / pocindex

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

HG-ha / MTools

MTools 是一个功能强大的多功能桌面应用程序，集成了音视频处理、图片编辑、文本操作和编码工具，内置AI增强功能，并提供本地 MCP 服务。旨在简化您的工作流程，提升生产效率

poco-ai / poco-claw

A more beautiful and easier-to-use alternative to OpenClaw. It features a nicer Web UI, built-in IM support, a sandboxed runtime and channel-based team collaboration. Under the hood, it is powered by a Claude Code–based agent.

ycdxsb / PocOrExp_in_Github

Automatically Collect POC or EXP from GitHub by CVE ID.

SourByte05 / Vulnerability-Wiki-PoC

🚀 2024-至今 1Day 漏洞 PoC 深度研究与复现归档。涵盖 OA、ERP、安防、数通、大模型及容器等 高价值资产漏洞，实战导向，助力安全研究与合规检测。

christiaangoossens / hass-oidc-auth

OpenID Connect authentication provider for Home Assistant

reader-dict / monolingual

The most comprehensive universal, multilingual, and monolingual dictionaries—perfect for e-readers, phones, tablets, and desktop apps. Powered by Wiktionary.

PierreGode / Ragnar

Ragnar is a full-stack network verification, troubleshooting, and monitoring suite for wired and Wi-Fi, running on a handheld pocket computer — Raspberry Pi Zero 2W and up across OSI L1–L7, as individual unit or in a mesh.

pocketpaw / pocketpaw

Your AI agent in 30 seconds. Not 30 hours. Self-hosted, open-source personal AI with desktop installer, multi-agent Command Center(Deep Work), and 7-layer security. Anthropic, OpenAI, or Ollama.

astropy / astroquery

Functions and classes to access online data resources. Maintainers: @keflavich and @bsipocz

nealbridges / VulnHunter

Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them test-first. A maintained fork of Capital One's VulnHunter, rebuilt for any agent harness.

Picovoice / speech-to-text-benchmark

speech to text benchmark framework

sakidekin / CVE-2026-41940-PoC

cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation

berabuddies / redis-poc

RCE PoC for Redis 6.2.22, 7.4.9, 8.6.4, 8.8.0, 8.8.1

apocas / restai

RESTai is an AIaaS (AI as a Service) open-source platform. Supports many public and local LLM suported by Ollama/vLLM/etc. Precise embeddings usage, tuning, analytics etc. Built-in image/audio generation with dynamic loading generators. Live chat deployment. Built-in block based graphical language. Prompt versioning and much more...

databrickslabs / dbldatagen

Generate relevant synthetic data quickly for your projects. The Databricks Labs synthetic data generator (aka `dbldatagen`) may be used to generate large simulated / synthetic data sets for test, POCs, and other uses in Databricks environments including in Delta Live Tables pipelines

opaxial / CVE-2026-9830

CVE-2026-9830 Proof of Concept

aniqfakhrul / CVE-2026-54121

Certighost POC

six-nut / PocketMen-with-you

Create high-fidelity Codex companions from 2+ photos with local open-weight neural editing and no OpenAI API key.

hashtagbasit / SteamOS-ARM-Port

Unofficial SteamOS for Snapdragon handhelds and tablets

i3T4AN / KADATH

Evolutionary multi-agent runtime that breeds, evaluates, and improves autonomous agents across reproducible epochs to converge on optimization of a goal.

cxm947 / FakeLiang

基于攻击图的靶场自动验证，多agent框架，kali MCP，自动化编排，POC生成。

hypnguyen1209 / CVE-2026-62911

POC pre-auth RCE on Exchange

rafabd1 / CVE-2026-75604-poc

CVE-2026-75604 Next.js Windows RCE poc

dinosn / mikrotrick-poc

CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC

hayatky / sdr-dtv-poc

Experimental SDR digital TV receiver PoC with a web UI for channel scanning, viewing, and short TS recordings.

Longado / ontopoc

Draft a company ontology from an uploaded table or document, verify it against every row in code, and keep the person's judgement so the next upload of the same file starts from it

atvkh / ICVE_Toolkit

智慧职教(ICVE)/职教云课程自动完成工具:刷课、自动答题、自动讨论、补签改签,支持 SPOC/MOOC/资源库,免费全功能开源

DeathShotXD / Comment2Shell

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker

penpenzh / pocketvla

Building a 0.003B VLA from Absolute Zero

ChaoMixian / dsh2shell

Unauthenticated RCE PoC for exposed DeepSeek Harness (dsh) web instances.

Boreas37 / CVE-2026-64638-PoC-XSS2Shell-

XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template

digiprosec / MicroTrick

cve-2026-86060 PoC

Snizi / CVE-2026-18963-Exploit

Exploit for KeyCloak CVE-2026-18963

xiabai2008 / ruoyi-scan

RuoYi (若依) dedicated vulnerability scanner: plugin architecture, three-state verdict, WAF bypass, exploit chains, AI POC generation, nuclei compatible. 若依专项漏洞扫描器

guneykabel / cve-2026-85706

Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.3.0–19.3.1

franciscocarloserra / ttslibre

Small, fast, free: an open recipe for a sub-100M TTS. Code, data, weights. The PoC trained to a working model in a few hours on one RTX 3090, and inspired a wave of open-weights TTS releases.

petermalone / CVE-2026-84543

Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability

ressl / cve-2026-87902-poc

PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab

imbas007 / POC-CVE-2026-60206

cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security

imbas007 / CVE-2026-42533

nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.

hawkymisc / typed-decision-bert

Unofficial PoC: a BERT-style encoder decision engine behind a typed-decision (noul / choice / score) HTTP API. Not affiliated with TypeSafe.

cryingtor / POC_platform

POC管理平台已集成公开POC仓库内容,可自行添加POC到平台实现集中管理,快速搜索,验证

StonkGuy / eac-arm64-emulation-poc

Patches to FEX-Emu that make aarch64 emulation faithful enough to run an x86-64 EAC game under Proton. Not affiliated.

DK27ss / ColdCard-38M-PoC

`rng_get()` links to MicroPython software `PRNG` instead of the hardware `TRNG`, shrinking seed entropy to `~2⁴⁰`

Lyutoon / redis-RCE-poc

RCE PoC for Redis 8.8.0

predyy / CVE-2026-34990

CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc.

tc4dy / CVE-2026-54121-PoC-Exploit

CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCSync. Safe Checker + full exploit, multi-threaded mass scan, Shodan integration, JSON/CSV/JSONL output. CVSS 8.8 High. Use Ethically, Stay Legal :v

nicolapocock / claude-reel-editor

Drop a raw talking-head clip into Claude Code, get a finished reel in your own brand. Review cuts, graphics and captions before it renders. HyperFrames + optional CapCut.

marcsole96 / ComfyUI-CMYK-Magic

Post Pocessing node to give a realistic vintage comic print (Ben-Day)

lupingQAQ / JGD

Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + dual-model adversarial auditing → weaponized PoC. Solving the last mile.