Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Pocket proof-of-concept and lab materials for PHP2SHELL remote code execution research.
A proof-of-concept opensource implementation of Android Auto's client side (phone side)
Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.
This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.
Research and proof-of-concept for raising the NVIDIA RTX 5070 Ti Laptop GPU power limit from 140W to 160W on Lenovo Legion Pro 5 Gen 10.
PoC for CVE-2026-87902 β unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab
Optimized implementation for color-icon-matrix barcodes
Proof-of-concept WEB proxy server for Telegram
A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS and credential-harvesting scenarios.
Patches to FEX-Emu that make aarch64 emulation faithful enough to run an x86-64 EAC game under Proton. Not affiliated.
Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingprivate.ml
Demo/test android app for libcimbar. Copy files over the cell phone camera!
runj is an experimental, proof-of-concept OCI-compatible runtime for FreeBSD jails.
A small proof-of-concept language model (not an LLM) that aims to incorporate latent-space prediction, internal state using recurrent trace units, and byte-by-byte output, built with MLX.
Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.
2026 Raycast Part Detection and KiUserExceptionDispatcher Troubleshooting Guide
High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting.
CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCSync. Safe Checker + full exploit, multi-threaded mass scan, Shodan integration, JSON/CSV/JSONL output. CVSS 8.8 High. Use Ethically, Stay Legal :v
CVE-2026-9830 Proof of Concept