CVE-2026-12227 (CVSS 9.8): WordPress Visual Composer Website Builder ≤45.16.0 — unauthenticated local file inclusion via vcv-template. Educational PoC only. - murrez/CVE-2026-12227

Python YARA malware scanner (CLI + GUI) with custom rules, MD5/SHA256 hashing, entropy analysis, PE detection and HTML reports - talha-cybersec/YARA-Malware-Scanner

Collects command and control (C2) server IPs from public threat intelligence sources and emits them as normalised Hoard CTI records. - hoardcti/c2-infrastructure

Educational web vulnerability scanner (authorized use only): pluggable checks, authorization gate, bundled vulnerable target. Python, pytest, GitHub Actions. - ahanya-mohan/web_vul_scanner

Contribute to APashaDev/nuclei-templates development by creating an account on GitHub.

Network and Vulnerability Scanner. Contribute to afshanfathima29/AlertNinja development by creating an account on GitHub.

PoC for CVE-2026-72001 — Pangolin < 1.22.0 cross-organization resource authentication bypass via the share-link access-token endpoint (CWE-639, CVSS 8.1). - BiiTts/CVE-2026-72001-Pangolin-Cr...

Contribute to watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127 development by creating an account on GitHub.

Reads Sliver C2 console logs containing sa-ldapsearch BOF output, merges the LDAP results, and writes BloodHound Community Edition v6 JSON. - faultcraft/sliver-ldapsearch-bhce-weaver

Contribute to zwindler/nodes-proxy-rce-poc development by creating an account on GitHub.

A non-invasive passive scanner that detects two critical WordPress vulnerabilities in a single run, with multi-threaded support for bulk scanning. - CronUp/WordPress-Vulns

Scanner de vulnerabilidades simples. Contribute to newtonfalbo/vulnerability-scanner development by creating an account on GitHub.

divcc: compiler wrapper producing per-device unique binaries via seeded link-order shuffling, so an exploit built on fixed addresses does not carry across a fleet. - IliasSoultana/diversity-poc

Chirp: full-stack social feed demonstrating and defending the complete XSS taxonomy (BCSE320L case study) - Puneesh12/Social-Feed-with-full-XSS-TAXONOMY

JYscan 是GYscan 的 Java 移植版，对应来源为 GYscan 的Go版源码 它是一款面向授权测 试与安全研究的命令行工具箱，侧重资产探测、漏洞检测与安全验证。 - xiguayiqiu/JYscan

Proof of concept for vulnerability CVE-2026-87902 in Wordpress - khellwan/CVE-2026-87902_PoC

Takes a PID, injects Meterpreter shellcode into PID process, and execute it // using a remote thread. Windows x64 - cristian17cruz/shellcodewithPID

Lab vulnerável (Docker) + PoC Python para a CVE-2026-87902 — path traversal não autenticado no WordPress Core (page-template -> LFI -> RCE condicional). Uso educacional/autorizado. - ...

CVE-2026-79417 PoC. Contribute to connorjaydunn/CVE-2026-79417 development by creating an account on GitHub.

Contribute to marcoarc01/seminario-owasp-xss-lab development by creating an account on GitHub.

An automated Python tool to scan web applications for common security vulnerabilities (XSS & SQL Injection).⁠ - HafidaElkharraz404/web-vulnerability-scanner