xfs kernel LPE (CVE-2026-64600), disclosed by Qualys on 22 July 2026 - k4ntux/COWSlip

PolycodeHub — 全栈在线判题平台（Next.js + Express + Spring Boot + FastAPI + seccomp 沙箱） - anyuer678/polycodehub

Collection personnelle de règles YARA forgées sur du malware frais (veille quotidienne MalwareBazaar / corpus VX-Underground). - Marjoriefort/fresh-yara-rules

Sample-to-story malware analysis pipeline: explainable static gate, CAPE report replay into a provenance graph + ATT&CK timeline, family attribution, and specificity-checked auto YARA/Sigma...

Unauthenticated arbitrary file upload on Honeywell PD45 web admin (firmware F10.19.010040–before F10.22.030745) leading to RCE. Python check/exploit PoC - murrez/CVE-2026-13249

CVE-2026-43499 (GhostLock) exploit for ASUS Zenfone 9 (SM8475, GKI 5.10.205) + KernelSU late-load. - CKwasd/zenfone9-ghostlock

Laboratorio pedagógico de CVE-2026-93485 (Comment2Shell): stored XSS no autenticado en WordPress core vía wpautop -> RCE, con demo del root cause auto-verificada, control 7.1.1 y la vía Post...

OnePlus Ace 6 temporary root tool (CVE-2026-64560) - device-verified port with corrected bootidParent address - qingle009/opace6-cve-2026-64560

Contribute to K3ysTr0K3R/CVE-2026-29053 development by creating an account on GitHub.

A race condition in rainbet.com allowing to predict outcomes of specified games ( original ). POC - zephyrcore/rainbet-casino-exploit

CLI web vulnerability scanner: headers, TLS, cookies, redirects, forms, reflected XSS. HTML/JSON reports. - Kassidi-Iliasse/threatharbor

Collection of remote shellcode Loaders using Early Bird APC injection, direct/indirect syscalls, ntdll and low level utilities, undetected by Windows Defender and BitDefender - Hue-Jhan/Syscall-Ear...

Collection of remote shellcode Loaders using APCs, direct/indirect syscalls, ntdll and low level utilities, undetected by Windows Defender and BitDefender - Hue-Jhan/Syscall-Apc-Injection-Trojans

Argus Sentinel: a defensive, non-destructive web application vulnerability scanner (OWASP Top 10 2025). - santiagosantofimio/webapp-vuln-scanner

Mission Critical Vulnerability Scanner (MCVS) Python Action. Create Python code without high and critical vulnerabilities. - schubergphilis/mcvs-python-action

This report details a digital forensic investigation of a fileless malware attack initiated by a compromised USB device. The analysis reconstructs a multi-stage execution chain (VBS, BAT, and Pytho...

现代化的websocket渗透测试工具，本身即支持多种websocket漏洞扫描与fuzz方法，同时高级功能支持websocket协议代理为http协议，由coolmoon和guaidao2开发。 - guaidao2/crackws

CVE-2026-61500 Rejetto HFS predictable PRNG session forgery to RCE PoC and Docker lab - aramosf/CVE-2026-61500

Enterprise Malware Intelligence, Dynamic Analysis & Digital Forensics platform - sample/case management, sandbox detonation, YARA/ATT&CK/IOC analysis, threat intel, reporting - Awai...

Browser extension (MV3) for in-browser SQL injection, reflected XSS, and security-header probing — companion to aegis - sourabhbeni/aegis-lens

FirmAudit2 — AI Agent firmware vulnerability audit pipeline, from unpacking to a CNVD-ready delivery bundle. | 从解包到 CNVD 交付总包，一条固件漏洞审计流水线：Agent 负责挖，平台负责把关 —— 八段引导、四道结果门、命令级复现，全程可回放、可校验、可交付 - JiuZer...