WordPress Core <= 7.1.1 unauthenticated LFI to RCE - validation lab, PoC, nuclei template (GHSA-7hp8-65ch-5whp) - Hassham1/CVE-2026-87902

Contribute to MonicaMuthu/Malware_Detector-YARA_Rules- development by creating an account on GitHub.

cve-2026-86060 PoC. Contribute to digiprosec/MicroTrick development by creating an account on GitHub.

▎ Fleet-evaluation harness for security-agent benchmarks (CyberGym-E2E, ExploitGym), run in real disposable Daytona sandboxes per trial — with Modal-based KVM-capable sandboxes planned for kernel-...

CampaignHub DOM XSS CTF lab. Contribute to arslanben/campaignhub-lab development by creating an account on GitHub.

AI-assisted remote code execution testing framework - command injection, SSTI, deserialization, JNDI/Log4Shell and file upload, planned and adapted per request. - CypherNova1337/VoidStrike

CVE-2026-94545 / GHSA-vcvr-r3jv-pc5j — Next.js next/og ImageResponse SVG injection (Satori, GHSA-wx4j-mvgx-mqwp): isolated Docker validation lab with vulnerable (16.3.5) vs patched (16.3.6) control...

CVE-2026-87902: PoC for WordPress's critical path traversal - bhideki/CVE-2026-87902

give me jsut what i need to paste in discription A lightweight vulnerability scanner designed to detect common security flaws, open ports, and system misconfigurations. - saivardhanlingam1-art/Vuln...

Hands-on manual penetration testing and Proof-of-Concept (PoC) exploitation framework targeting OWASP Top 10 vulnerabilities (SQLi, XSS, CSRF, Path Traversal) via advanced payload injection and DOM...

CVE-2026-89274 — WP Recipe Maker <= 10.8.1 arbitrary shortcode execution via rating-comment reviewBody (CVSS 9.1): Docker validation lab with vulnerable (10.8.1) vs patched (10.8.2) controls...

A technical vulnerability lab modeling unvalidated user input vectors, remote code execution (RCE) flaws using eval(), and structural string sanitisation fixes. - steelo-cmg/Source-Code-Auditing-Lab

Wi-Fi Password Auditor: Secure Credential Recovery & Network Vulnerability Scanner for 2026 - Nikita465-dev/wifinet-creds-inspector

A lightweight Python-based vulnerability scanner for authorized local targets. - thirunika24/Vulnerability-Scanner

YARA rules for identifying suspicious file patterns - mohammedabrar-27/Yara-malware-detection-lab

JSM Show Post Metadata < 4.9.1 - Contributor+ Stored XSS via Custom Field Meta Key - pervinzahidli/CVE-2026-88997

ShenCode 2026: Next-Gen Shellcode Builder & Payload Converter Suite - erengng/shellforge

Framework-agnostic TypeScript libraries for Deno, published to JSR as @spy4x/*: validation, platform primitives, server adapters, net/SSRF guards, email, time, realtime, integrations. - spy4x/ts-libs

Production-ready webhook engine for .NET 8/9/10: resilient outbound delivery with Polly v8 & socket-level SSRF mitigation, Redis distributed DLQ & anti-replay defense, and ASP.NET C...

Security Advisory & Proof of Concept: Remote Code Execution (RCE) via Unsafe Skill Frontmatter Evaluation in Agentic AI Frameworks. - 3bkader-gpt/vercel-skills-poc

Generic PoC for MLflow pickle deserialization RCE (CVE-2024-37054-style). Poisons a registered model via the MLflow REST API to achieve code execution when the model is loaded. - BardLaudian/CVE-20...