Bug bounty workspace for Burp Suite that automatically collects, parses, deduplicates and stores HTTP requests/responses for web application security testing. - PallidWhisper/BurpVault

CVE-2026-92229 — Forminator ≤1.57.2 unauth shortcode exec (current_url / quiz AJAX). Python 3 PoC. - murrez/CVE-2026-92229

PoC for CVE-2026-84434: unauthenticated arbitrary file upload in Gravity Forms ≤3.1.0.4 via hidden File Upload fields. Python check/exploit/mass scan. - murrez/CVE-2026-84434

Vulnerability Scanner for GoLang supply chain.VSCode API extension for streamlined functionality. - nuggetplum/devsec

Tracking multi time frame reversal and confluence. Contribute to AzharM82/multitimeframerev development by creating an account on GitHub.

ASP-based PACE planning for tactical C2 communications - cols153/asp-pace-planner

Contribute to 9018/c2-all development by creating an account on GitHub.

RAVAGER — web exploitation framework. SQLi, XSS, LFI, open redirect, file-upload. Proof over guessing. // DEDSEC - Unknownx007/ravager

Python-based web vulnerability scanner that fingerprints web technologies, detects versions, correlates software with known CVEs, and generates security reports. - jhug03/Web-Vulnerability-Scanner

CVE-Lib 2026 — 70,261 CVE records with offline-searchable PoC corpus, pinned versions, and local PoC source linkage (library/, exploitdb, metasploit, nuclei) - JinzoU-MwM/CVE-Lib

Contribute to ksotaria1337/Conductor-rce development by creating an account on GitHub.

Contribute to SIMBA-5/xss-vibes-enhanced development by creating an account on GitHub.

Contribute to gitvani/Jenkins-POC development by creating an account on GitHub.

0day click crash not fixed in 19/09/2026. Contribute to nfohunt/telegram-0click-crash development by creating an account on GitHub.

Contribute to vvsy46/CVE-2026-23111-PoC development by creating an account on GitHub.

Device-bound CVE-2026-64560 adaptation for RedMi K80pro miro OS 3.0.304.0 - RMDycz/K80Pro-miro-CVE-2026-64560

Sentinel - evidence-based, read-only Windows endpoint security scanner (C#/.NET 10): YARA-lite rules, AMSI provider queries, script & process-chain analysis, bounded SQLite store - achryrn/...

Autonomous settlement circuit breaker protecting ledgers against CVE/RCE balance bypasses, nocturnal draining, and prompt injection attacks using TypeSafe Jev. - finrod21/jev-transaction-guard

A Java Burp Plugin that performs text clustering on responses to identify outliers/groups based on the actual content of the server responses, say from an Intruder run. - hoodoer/ColonelClustered

Refuse to fetch a URL that points inside your network: the disguises (integer, hex, IPv6-mapped, userinfo), DNS resolution of every address, and a check on every redirect hop. No dependencies. - ku...

Completed a Python-based Mini Vulnerability Scanner that scans common ports, identifies services, checks basic security configurations, and generates a vulnerability report. - sharvaritamse/vulnera...