CVE-2026-42589 & CVE-2026-40281 - GotenBerg. Contribute to codeb0ssx/CVE-2026-42589xCVE-2026-40281-PoC development by creating an account on GitHub.

dsh (DeepSeek Harness) 逆向 agent skill 家族：Ghidra headless daemon + 分诊/脱壳/静态/漏洞/动态/流量/安卓七场景 | Reverse-engineering agent skills: triage, unpacking, decompile, pwn audit, pcap forensics, APK analysis -...

NetScaler CTX697096 Threat Hunt Helper (IoC scanner) - CVE-2026-88771, CVE-2026-88772 - orjanj/netscaler_threat_hunt_helper

Unauthenticated RCE in Yamcs mission control via YAML injection in reconfigureInstance() - MRdark-ops/CVE-2026-55559

SPA en JavaScript vanilla: perfiles sensoriales para niños neurodivergentes, e-commerce con carrito persistente y monitor IoT simulado. Renderizado seguro sin innerHTML (anti-XSS). - jocelin-portaf...

Gotenberg 8.30.1 unauthenticated RCE exploit. Contribute to MRdark-ops/CVE-2026-40281-exploit development by creating an account on GitHub.

Penpot <2.15.0 allows for unathenticated RCE CVE-2026-45805 - overgrowncarrot1/PenPot-RCE

Malware analysis, information on malware, reversing, required scripts, yara rules, configuration extractors. - sarfraz432/malware-analysis

Bounded offline YARA rule drafting from caller-labeled byte corpora with real native validation and explicit uncertainty. - dhtfish-98/YaraRuleDraftReview

Benign PoC for GitPython CVE-2026-87817 (bug bounty research, arc-bbp) - hackthesoul/arc-studio-gitpython-cve-poc

🔴 HackTheBox Abducted (Medium) — CVE-2026-4480 (Samba %J) → rclone reveal → SMB-Symlink → systemd Drop-in → Root - timgad794/Abducted-HTB-Writeup

Seven evidence-bounded OAuth trust-boundary security advisories for geelen/mcp-remote, reviewed through 0.1.38. - playb0t/mcp-remote-oauth-security

这是一个面向渗透测试与攻防演练的渗透测试与攻防演练平台。长期目标是提供资产发现与指纹识别、端口与服务测绘、漏洞模板匹配、凭证探测、载荷生成、攻击链编排、授权边界强制和结果评分，把攻防演练沉淀为可复用平台。 - f5dt1artum/redforge

IronClad Security Command Center is an advanced, enterprise-grade web application vulnerability scanner and dynamic Web Application Firewall (WAF) suite. - Ganesh030106/IronClaud-Security-WebScanner

Penetration testing portfolio: FTP vulnerability assessment & exploitation in isolated lab. Demonstrates network reconnaissance, CVE-2011-2523 validation, and post-exploitation verification...

CVE-2026-104826: path traversal to RCE in DropzoneFileExplorer chunked upload handler - KiwKNR/CVE-2026-104826

CVE-2026-103931. Contribute to overgrowncarrot1/Instatic-Stored-XSS-CVE-2026-103931 development by creating an account on GitHub.

OpenID Connect relying party for Laravel: discovery, PKCE, strict ID token verification, multi-tenant issuers and back-channel logout, with every outbound call through an injectable, SSRF-guarded H...

Go SDK for OpenCTEM: API client, sensor runtime kit and ready-made scanner integrations (Nuclei, Trivy, Semgrep, CodeQL, subfinder, httpx, naabu, katana) with an SSRF-safe HTTP layer. - openctemio/...

Python Package of AutoPYara. Contribute to Botacin-s-Lab/AutoPYaraPyPI development by creating an account on GitHub.