CVE-2026-76060 PoC for a ZoneMinder vulnerability leading to RCE - investigato/CVE-2026-76060_ZoneMinder_CommandInjection-PoC

Contribute to s1lentf00thold/rConfig-3.9.4-rce development by creating an account on GitHub.

轻量级 CAASM 与内网安全扫描工具，支持多来源资产归并、安全对账、服务识别、漏洞验证、变更 Diff 和报告，提供 CLI、API 与 Web 控制台。 - yuhuamiao/yscan

Linux vulnerability research from LinnemanLabs - security advisories, CVEs, exploits, reproducible PoCs. - linnemanlabs/advisories

A scalable LeetCode clone & Remote Code Execution (RCE) engine. Demonstrates how platforms handle heavy code-compilation by offloading to background workers using Node.js, BullMQ & ...

HackTheBox "Cobblestone" — Insane Difficulty — Second-Order SQLi to Twig SSTI to Cobbler RCE Writeup - FindYourBugs/cobblestone-writeup

Export HTML Table to Sheet. Contribute to gavodagbe/sheets-export-poc-spring development by creating an account on GitHub.

A beginner-friendly Python Vulnerability Scanner that detects open ports, basic security misconfigurations, and potential vulnerabilities, while generating a simple security assessment report. - ru...

Contribute to rmhowe425/POC-CVE-2026-19296 development by creating an account on GitHub.

A PoC exploit for CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass - iLokaas/CVE-2026-24061-payload

Desktop malware scanner for files and URLs — check before you run or download. Local engines (ClamAV, YARA-X, Defender), hash reputation, and an ML model. Python, PySide6/QML. - TyomPapiyan/PreScan

NetSecurePro IA Lab - Meta+1 SSRF and Anti-TOCTOU Socket Pinning Validator - milyes/netsecurepro-ia-lab

REDTIDE — an asynchronous web application security scanner for red-team engagements and penetration testing. Combines active vulnerability detection (XSS, SQLi, SSTI, SSRF, LFI, and more), passive ...

HackTheBox "Abducted" — Medium Difficulty — Samba Print-Spooler RCE & Privilege Escalation Writeup - FindYourBugs/abducted-writeup

A research-grade Windows C2 framework in Go: TLS-encrypted beaconing, 40+ post-exploitation modules, AMSI/ETW bypass, process injection, UAC escalation, and a template-based implant builder. - luci...

Contribute to rmhowe425/POC-CVE-2026-19286 development by creating an account on GitHub.

Automated Python dependency vulnerability scanner. Contribute to mohrez-004/osv-vuln-scanner development by creating an account on GitHub.

Sandbox: does skipping CodeQL on PR events bypass a code scanning ruleset? - simulacra-ghas-lab/ghas-merge-protection-demo

MCP server for low-level Windows process memory research. Typed reads/writes, AOB scans, x64 inline hooking, PEB introspection, server-side Lua 5.4. - Boti-Ormandi/memscope-mcp

Supervised penetration-testing orchestrator in Go with SARIF 2.1.0 compliance, Dockerized scanners, and SHA-256 audit trails. - lucasmartins-ai/lookapentest

CVE-2026-82286 — gpt-crawler <=1.5.1 unauthenticated arbitrary file write via outputFileName (POST /crawl). PoC + self-contained Docker lab. CVSS 8.6, CWE-22. - BiiTts/CVE-2026-82286-gpt-cra...