[GitHub] eip-pocs-and-cves
Proof-of-concept exploits and reproduction labs for CVEs analyzed by the Exploit Intelligence Platform <p align="center"> <a href="https://exploit-intel.com"> <img src="https://cdn.jsdelivr.net...
"
Comprehensive hub for vulnerability research, exploit analysis, malware investigation, and AI-powered security insights. Access 6,528+ exploits, real-time threat intelligence, and cutting-edge security tools.
Verified Exploits
Malware Samples
Security Tools
Active Threats
Stay updated with the most recent vulnerability discoveries and exploit research
Proof-of-concept exploits and reproduction labs for CVEs analyzed by the Exploit Intelligence Platform <p align="center"> <a href="https://exploit-intel.com"> <img src="https://cdn.jsdelivr.net...
Red Team Hackery & Web p0wn # PowerShell-Scripts A collection of PowerShell scripts and Python π utilities for security validation, administration, reporting, Microsoft Entra ID, Azure, Microsoft ...
Swarmageddon β consent-first, non-destructive, allowlist-gated AI web-vulnerability scanning swarm with a live dashboard. Team ALANI Β· AITX & MLOps World Community Hackathon. # VulnSwarm β Swarm...
CVE-2026-64638 | WordPress < 7.0.3 Pre-Auth Stored XSS β RCE <div align="center"> <img src="img/banner.svg" alt="xss2shell" width="700"> <br><br> [ β race + heap spray to system() <p align="center"> <pre> βββββββ βββ ββββββββββ ββββοΏ½...
php2shell (CVE-2026-109618/619) differential lab: ASAN builds of PHP 8.4.26 vs 8.4.27, one two-request trigger, automatic crash/no-crash verdict. Reproduces the fixed state-corruption bug β not RCE....
Local-only PoC lab for CVE-2026-109618 / CVE-2026-109619 (php2shell) β two critical RCEs in PHP core, session.upload_progress, on by default since 5.4. Docker A/B (vulnerable vs patched builds), rac...
CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656 # plex2shell Unauth RCE chain for Plex Media Server <= 1.43.3.10828. Fixed in 1.43.3.10861. Update ASAP. **CVSS 3.1: 9.8** `AV:N/AC:L/PR:...
# php2shell β PHP 8.4.26 Session Vulnerability Reproduction [δΈζ](#δΈζ) | [English](#english) --- ## English Under the constraints of "completely remote, HTTP only, target page has no `ses...
GPT-4 powered threat analysis and code explanation
Real-time feeds from CISA, MITRE ATT&CK
Safe exploit code viewing and analysis
AI-powered security tool suggestions
Visual threat intelligence dashboards
Email and webhook notifications