Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. F...

Enterprise Python Vulnerability Scanner : An automated network security scanner built with Python and Nmap APIs to perform target reconnaissance, identify service misconfigurations, and generate s...

This repository contains information and updates on the VectorFreed vulnerability chain. - rafabd1/VectorFreed

Contribute to lzty/CVE-2026-94128 development by creating an account on GitHub.

Modular red team automation framework with plugin architecture. Recon, enumeration, exploitation, post-exploitation, reporting modules. MITRE ATT&CK mapping. Phase 3 portfolio project. - ka...

Defensive vulnerability localization daily driver around Antares — keyless operate + fixture/live locate → SARIF. Not a Cisco product. Localization ≠ exploitability. - pandeyaby/ZERODAY

Web vulnerability scanner with an interactive CLI, HTTP security header analysis, technology detection, low-impact SQLi heuristics, directory discovery, reports, and Spanish/English support. Create...

Roundcube virtuser_query pre-auth SQLi (CVE-2026-48842). Python PoC — version detect, virtuser plugin, login probe. https://pocbit.org - murrez/CVE-2026-48842

Roundcube virtuser_query pre-auth SQLi (CVE-2026-48842). Python PoC — version detect, virtuser plugin, login probe. https://pocbit.org - pocbit/CVE-2026-48842

ROP chain filter & shellcode helper for exploit developers — built for OSED/OSCE3 - Tendarkness/roprop

This contains a number of shell functions that may be of use. The intention is for the root of this repository to be cloned to an area in a user's home directory. Then `shellFunctionSetup.s...

Contribute to nikul0022/Penetration-Test-SNMP-Exploitation-on-Windows-Server-2008-R2 development by creating an account on GitHub.

Professional TryHackMe Smol walkthrough documenting WordPress enumeration, jsmol2wp LFI, wp-config disclosure, PHP backdoor analysis, RCE, reverse-shell access, credential-based lateral movement, S...

Hands-on cybersecurity CTF labs covering SQL injection, SSRF, XSS, MITM, race conditions, path traversal, authorization bypasses, OS command injection, and authorized network security testing. - si...

Hands-on cybersecurity and CTF labs covering email forensics, Windows Registry and Shimcache analysis, PST/OST triage, mobile verification, authorized OSINT, partition recovery, SQL injection, SSRF...

Zero-Trust API Vulnerability Scanner for automated API security analysis. - tanishqueagrawal/SentinelAPI

Unauthenticated IDOR in Bookly ≤ 28.2: bookly_get_form_id + bookly_render_complete leak any order’s bookly_order token; bookly_add_to_calendar exposes appointments; bookly_rollback_order cancels/de...

Unauthenticated authorization bypass in Customer Reviews for WooCommerce ≤ 5.120.0: holders of a public /cusrev/{formId}/ review link can POST cr_local_forms_submit with arbitrary Media Library att...

Unauthenticated privilege escalation in WordPress WAWP (Automation Web Platform) ≤ 4.8.6 via public REST signup and unsanitized wawp_custom_fields → admin. Python check/exploit PoC (PoCbit). - murr...

Known-vulnerability scanner for npm, Go and Python lockfiles, against the real OSV.dev database. Real CVSS v3.1 scoring, waivers, SARIF. Python, MIT. - sriharifortitude/vulnlock

Contribute to MaestraSoprano/SSRF3r development by creating an account on GitHub.