CVE-2025-55182 - React2Shell (CVE-2025-55182) unauthenticated RCE via React Server Components Flight deserialization - r3vpwnx/CVE-2025-55182

In-band web application vulnerability scanner for developers: a reusable engine, a CLI, and an optional dashboard. Passive and production-safe by default; opt-in Active Mode for XSS, SQLi, SSRF, RC...

Outbound-webhook delivery service in Go: Postgres work queue (SKIP LOCKED + leases), HMAC signing, backoff retries, per-endpoint circuit breaker, dead-letter, SSRF guard, replay dashboard. - akshar...

Intentionally vulnerable lab: Stored XSS via JSON-LD injection in SSR pages served to mobile/crawler User-Agents. Desktop gets safe React SPA. - maverick0o0/stored-xss-mobile-ssr-lab

Windows Defender 0day PoC (Proof of Concept). Contribute to k0i5/windows-defender-0day- development by creating an account on GitHub.

⭐️ Acunetix | Web Vulnerability Scanner 2026 | Setup Installer v14 | Patch Activator Keygen | License Key Pre-Activated | Full Version Serial | Latest Build Pro Updated | Get Desktop Working Window...

AI cybersecurity reasoning engine — turns raw scan output (Subfinder, Httpx, Nmap, Nuclei) into prioritized, explainable findings with audience-aware guidance for 4 personas. - Ayaan1911/Argus-Sent...

Explore real-world vulnerabilities in an interactive 3D universe. Connect exploitation evidence, package advisories, and remediation guidance to understand what’s new, why it matters, and what to p...

LAB-RCE - 3 jalur Remote Code Execution (CWE-78 command injection, CWE-95 eval, CWE-434 upload webshell) - tugas kuliah keamanan web - ManuelKy08/lab-rce

Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881 and CVE-2026-43284 - LSPosed/LSPromise

Nuclei Templates. Contribute to angelikakasia/apache-nuclei-security-templates development by creating an account on GitHub.

A Jenkins view that turns your jobs into a wall of big coloured tiles - eduardocerqueira/jenkins-live-wall

CVE-2026-83991: Windows Cloud Files access-check bypass - karollooool/CVE-2026-83991-writeup-and-poc

Opengrep security rules for detecting SQL injection, SSRF, path traversal, LDAP, and JNDI vulnerabilities in Java and Spring applications. - ma86ima/opengrep-rules

Advanced Discord C2 Framework — Browser exfil, token grabber, keylogger - talesgg/shivault-Stealer

Contribute to manjunathy-harness/cegeka-poc development by creating an account on GitHub.

Exploited Reflected, Stored, and DOM-based XSS vulnerabilities using PortSwigger Academy, Burp Suite, and Kali Linux. - pradheepa73/Cryptonic_Area_02-xss-vulnerability-assessment

Burp Suite extension: mark URL/body parameters in Repeater and swap them against known values from other test accounts for fast IDOR testing - cylockholmes/burp-id-switcher

Public proof-of-concept references and provenance for ARGUS; no exploit execution - argus-supply/argus-poc-index

AD CS 证书身份伪造漏洞，属于ESC（Exploit Certification）系列 的新成员 - TryA9ain/Certighost_CVE-2026-54121

Cloudflare WAF operations lab covering application onboarding, XSS and SQLi detection, rule tuning, event investigation, rate limiting, Burp Suite validation, and Terraform automation. - AliaElf/cl...