CVE-2026-31857 - Craft CMS authenticated RCE timing verifier. - WhiteMachin3/CVE-2026-31857

面向嵌入式 C/C++ 的构建期 SBOM 工具，配一份社区共建的芯片 SDK 组件识别规则库。 识别被芯片原厂改名、魔改、静态链接后的开源组件（包括国产芯片 SDK 与国密库）， 生成 CycloneDX / SPDX 软件物料清单和 VEX，对照欧盟《网络弹性法案》（CRA）自查， 并起草 CRA 与工信部的漏洞报送材料。 - GANGMU-SBOM/gangmu

EspoCRM 9.3.3 - Authenticated SSRF via Alternative IPv4 Notation - EntroVyx/CVE-2026-33534

Forensic analysis of a double Sora AI malvertising infection: Electron MaaS fake-installer kit + Braodo-like Python infostealer. IoCs, YARA rules, MITRE mapping. Research only, no samples. - anckha...

A responsive React frontend for a full-stack blogging platform, equipped with DOMPurify for XSS protection and seamless content rendering. - vanshjain137/blog-frontend

Contribute to Stephenmiles08/inz-scan development by creating an account on GitHub.

Contribute to masterpaster1337/yara-rules development by creating an account on GitHub.

Deployment of DVWA on a local Kubernetes cluster using Docker Desktop, Minikube, Kubernetes, and MetalLB, with validation of SQL Injection, Reflected XSS, and Command Injection vulnerabilities. - n...

Independent cybersecurity research: case studies, IoCs, YARA rules, forensic methodology. Case 001: double Sora AI malvertising infection (Electron MaaS kit + Braodo-like infostealer). - anckhalion...

Trinity C2 Framework . Contribute to iamgred/Trinity development by creating an account on GitHub.

Contribute to N0K0/burp-mcp development by creating an account on GitHub.

Network forensics write-up for CyberDefenders' CCD RetailBreach lab tracing a brute-force, stored XSS, session hijack, and LFI attack chain through PCAP analysis in Wireshark. - eth-hac-ste...

Reflected XSS into HTML context with most tags and attributes blocked - Alvking/Reflected-XSS-into-HTML-context-with-most-tags-and-attributes-blocked

CTH Secure Remediation Shell prototype: DELIBERATELY VULNERABLE demo target (lodash 4.17.15 + reflected XSS). Not for deployment. CTH fixes it on a branch and opens a draft PR. - makshamsheer/CTH-P...

A Tier-1 SOC Analyst investigation of a real-world malware capture (.pcap). Features victim host profiling, HTTP C2 beacon analysis, OSINT threat intelligence, custom Suricata IDS/IPS rule engineer...

Porting CVE-2026-43499 (GhostLock) to the Realme GT 7T (RMX5085): device profile from the phone's own boot.img, KernelSU late-load, one-tap root via Anchor, and the four calibrations that m...

Sentinel is an advanced, multi-threaded antivirus and forensic scanning engine written in Rust. It combines industry-standard YARA pattern matching with Windows Volume Shadow Copy Service (VSS) sna...

说明这是一个用于学习、复现漏洞的模拟环境。必须强调“本地搭建”、“仅供学习”. Contribute to TheJiu/PentaRange development by creating an account on GitHub.

Spring Security resource server with OAuth 2.0, JWT, resource ownership, TLS and mTLS labs. - LuisDeveloper-Fer/secure-api-demo

Contribute to Sanjith1236/CVE-2026-8206-Kirki-Exploit-Analysis development by creating an account on GitHub.

CVE-2025-55182 "Ghost Action" — pre-auth RCE (React Flight deserialization, Next.js 15.5.6) CTF challenge. Problem only; solve/writeup excluded. - OhSoomin812/cve-2025-55182-ctf