A simple python script PoC for CVE-2026-104286 ( FortiMail PathTraversal Critical Vulnerability ) - 0xREBYTE/CVE-2026-104286-PoC

cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation - sakidekin/CVE-2026-41940-PoC

Static RE assistant: auto-deobfuscation hints, packer triage and embedded payload detection for ELF binaries. - Haind03/lucid-rev

Developed a C++17 Local Procedure Call (LPC) system using Unix Named Pipes and scatter/gather I/O. Engineered a custom binary protocol with asynchronous multi-threading, deep payload inspection to ...

Unauthenticated RCE in WordPress Forminator Forms <= 1.56.1 (CVSS 9.8) - 0x4cr/CVE-2026-15748

js, web lhf, xss(reflected, stored), sqli. Contribute to khawtomkung/loc-camp9-hackday-labs development by creating an account on GitHub.

Deliberately vulnerable Flask e-commerce app with 7 working exploit scripts and a 1,200+ line automated 8-phase vulnerability scanner; achieves 95% risk reduction (37→2/100) across the hardened imp...

Self-hosted web vulnerability scanning platform — 200 deterministic scanner modules, evidence-backed CVSS-scored reports, HTML/PDF output, continuous monitoring. Zero AI at scan time. Laravel · Doc...

CVE-2026-102489 exploit in golang. Contribute to 1xPwn/CVE-2026-102489 development by creating an account on GitHub.

有限空间无限探索. Contribute to xijiangyue-0op/0day-skill development by creating an account on GitHub.

RuleHunt - YARA Sigma Nuclei rules repository. Contribute to aoodiakdiro0001-ops/rulehunt development by creating an account on GitHub.

Independent reconstruction, lab validation, and PoC for CVE-2026-72898 — Metabase unauthenticated SQLi (patched in 0.63.5) - Riftweld/metabase-cve-2026-72898

Static unpacker, config extractor, YARA rules and IOCs for a Lumma Stealer chain delivered by a Go process-hollowing loader - ArtfulDodger10/lumma-stealer-campaign

🛡️ Security Researcher · Web Pentester · Founder of 2MNY Security — building the largest open-source web vulnerability scanner (200 modules) - RanaKhan77/RanaKhan77

OWASP Top 10 web application vulnerability scanner - Korir555/webapp-security-scanner

Automated HackerOne Hacktivity report-link collector - pull every disclosed report for a vulnerability class (XSS, SSRF, RCE…) via the official API. Completeness-guaranteed, resumable, multi-engine...

📈 Technical-analysis agent for stocks & crypto: ~24 indicators, market structure, confluence scoring and risk-managed trade plans. FastAPI · 240 tests - rehan-123/technical-analysis-agent

0DAY - CVE-2026-91136 Divi Plus <= 2.4.0 unauthenticated arbitrary file read (mass scanner + exploit) - fl0ydsec/CVE-2026-91136

Independent reconstruction, lab validation, and PoC for CVE-2026-9198, the Langflow unauthenticated RCE (fixed in 1.10.1) - Riftweld/langflow-cve-2026-9198

A Python-based Government Website Vulnerability Scanner that checks security headers and cookie protections, identifies missing configurations, recommends fixes, and generates HTML and JSON reports...

Proof of concept and isolated Docker lab for CVE-2026-103889, an unauthenticated RCE vulnerability in Expivi 3D Product Configurator for WooCommerce ≤ 2.16.2. - kayes817/CVE-2026-103889