gichirimaku / wp2shell-PoC
CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.
gichirimaku / wp2shell-PoC
jburgess-r7 / CVE-2026-97229-PoC
GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image
wkpwn / CVE-2026-83834
โ
code-zm / plex2shell
CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656
Beardhammer / CVE-2026-85884
CVE-85884 POC
feiguang-ai / plz110-6.12.69-cve-2026-64560-ksu
ไธๅ 15T๏ผPLZ110๏ผไธดๆถ root + KernelSU per-boot ๆฅ็ฎก๏ผCVE-2026-64560 ็งปๆค๏ผไธๅๅๅบใ้ๅฏๅณๅคฑๆใๅ ๆ ธ 6.12.69-android16-6-g242e1a07f878ใ
YuKongA / ghostlock-app
GhostLock One-Tap Execution App (CVE-2026-43499)
sakidekin / CVE-2026-41940-PoC
cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation
opaxial / CVE-2026-9830
CVE-2026-9830 Proof of Concept
LSPosed / LSPromise
Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881 and CVE-2026-43284
alex193a / Root-My-Pixel
Jailbreak supported Google Pixel phones with CVE-2026-43499
aniqfakhrul / CVE-2026-54121
Certighost POC
Semperis-Community / ResetNightmare
POC tool for ResetNightmare (CVE-2026-27912)
hypnguyen1209 / CVE-2026-62911
POC pre-auth RCE on Exchange
ZeroDayEvil / CVE-2026-54121-Certighost
๐ก Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.
ynsmroztas / KeySniper
**CVE-2026-18963** โ unauthenticated Keycloak account takeover via the reset-credentials flow.
OmriBaso / SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit
Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.
Supersonic / TLPE
CVE-2026-49881, using insecure context creation in Android 17's Telecom service to execute arbitrary code as UID 1000 system_server from an unprivileged app
rafabd1 / CVE-2026-75604-poc
CVE-2026-75604 Next.js Windows RCE poc
dinosn / mikrotrick-poc
CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC
sarabpal-dev / IonStack-S22U
CVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)
ZeroDayEvil / CVE-2026-20805-PoC
๐ก๏ธ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information Disclosure & Memory Leak Diagnostic).
ZeroDayEvil / CVE-2026-21858-n8n-FullChain
๐ก๏ธ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chain).
ZeroDayEvil / CVE-2026-75604-PoC
๐ก Official AI Security Tool module for CVE-2026-75604 (Next.js Windows Unauthenticated Remote Code Execution) with safe in-app execution, deep vulnerability validation, and DevSecOps-ready security auditing workflows.
ByteV0rtex / CVE-2026-65343
CVE-2026-65343 PoC โ AppleKeyStore OOB read โ KASLR defeat (iOS 26.6 / 23G71)
NanoTurtle1145 / root-my-s24
Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China / Hong Kong SAR / Taiwan))
villager1314 / CVE-2026-64560-Analysis
โ
ZeroDayEvil / CVE-2026-20817
๐ก๏ธ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege Escalation PoC).
SyntaxMethod / CVE-2026-42978-PoC-Research
CVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free & Race Condition PoC research, diagnostic scanner, and security audit module for AI Security Tool.
watchtowrlabs / watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452
CVE-2026-8452 PreAuth RCE
zenyxx-xd / RootMyVivo
One-click root for vivo/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU
SyntaxMethod / CVE-2026-41089-Netlogon-RCE-PoC
CVE-2026-41089 Netlogon RCE PoC โ security research, vulnerability validation & defensive testing.
DeathShotXD / Comment2Shell
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
sfewer-r7 / CVE-2026-55040
Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)
Boreas37 / CVE-2026-64638-PoC-XSS2Shell-
XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain โ PoC exploit + defensive audit tool + nuclei template
combeng6th / DirtyInit
One-touch, universal root for Samsung devices as u:r:init:s0
digiprosec / MicroTrick
cve-2026-86060 PoC
hybLOVE / iqoo-temp-root
vivo/iQOO ไธดๆถ root ๅทฅๅ ท็ฎฑ (ๅ ่งฃ้ไธดๆถroot, CVE-2026-43499) - ๆบ็ ไธ่ๆฌ
EQSTLab / CVE-2026-94545
Next.js RCE
Markakd / Container_escape
container escape POCs for CVE-2026-80521 and CVE-2026-52910
Snizi / CVE-2026-18963-Exploit
Exploit for KeyCloak CVE-2026-18963
4minx / CVE-2026-50522
CVE-2026-50522 PoC
mobilehackinglab / CVE-2026-28576-poc
SQL injection vulnerability in Android 17 (AOSP)
R0rt1z2 / GhostLock
Kernel root exploit (CVE-2026-43499) for some Amazon devices
guneykabel / cve-2026-85706
Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7โ19.1.7; 19.2.0โ19.2.5; 19.3.0โ19.3.1
petermalone / CVE-2026-84543
Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability
nhh9905 / CVE-2026-62735
CVE 1-day in http.sys
wxxsfxyzm / GhostLock-Galaxy
Root your Galaxy using CVE-2026-43499
ressl / cve-2026-87902-poc
PoC for CVE-2026-87902 โ unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab
imbas007 / POC-CVE-2026-60206
cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security
imbas007 / CVE-2026-42533
nginx heap buffer overflow PoC โ CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.
abraxas / CVE-2026-87902
CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)
ZeroDayEvil / CVE-2026-42980-PoC
โ
boxiaolanya2008 / CVE-2026-43499-Neo11Plus
the CVE-2026-43499 by iqooneo11
aramosf / CVE-2026-68138
CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC
woshimaniubi8 / CVE-2026-43499-root-KernelSU
ๅบไบๅ ๆ ธๆผๆดCVE-2026-43499็ๆฌๅฐๆๆ้้ ๏ผ้ๆๅตๅ ฅๅผ KernelSU.CVE-2026-43499+KernelSU่ถ็ฑๆจกๅผ
Malwation / CVE-2026-43786
Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that allows an application to gain root privileges.
predyy / CVE-2026-34990
CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc.
tc4dy / CVE-2026-54121-PoC-Exploit
CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCSync. Safe Checker + full exploit, multi-threaded mass scan, Shodan integration, JSON/CSV/JSONL output. CVSS 8.8 High. Use Ethically, Stay Legal :v
rails / rails-forensics-CVE-2026-66066
โ