Security advisory — SQL Injection leading to RCE in Vedo Suite (Bottinelli Informatica). Responsible disclosure. - StefanoAndreatta/CVE-2026-51366-SQL-Injection-leading-to-Remote-Code-Execution

CVE-2026-97229: GitLab RCE Unauthenticated via CI Lint - OppositDeer/Gitlab-RCE-CVE-2026-97229

Defensive, non-exploit detector for CVE-2026-108097 (SA-CORE-2026-014) — Drupal core Field UI RCE - FurkanKAYAPINAR/CVE-2026-108097

Reproducer for CVE-2026-78165 (Apache Camel camel-spring-redis): default JdkSerializationRedisSerializer deserializes Redis PUBLISH payloads with no ObjectInputFilter (RCE) — Camel Spring Boot + Ca...

Fast OpenGraph & Twitter Card URL metadata extraction API with SSRF shield and caching - ehtesum/link_preview_api

ON-2292 sandbox PoC for tag ruleset with deploy key bypass - festum/tag-ruleset-poc

ExifToolExploit CVE-2021-22204 \\ Arbitrary Code Execution - cyfrowesny/exiftool-7.44-12.23-exploit-CVE-2021-22204

Worked SEED security labs: Set-UID and environment variables, buffer overflow, format-string, XSS, symmetric-key crypto, hash length extension, PKI, and packet sniffing/spoofing. FEUP Information S...

Live SSH attack dashboard for my Home SOC project: Log Hunter detections + AbuseIPDB threat intel, hardened against log-injection XSS. - Ezashi9/home-soc-dashboard

Contribute to RuoJi6/AgentMirror development by creating an account on GitHub.

Exploitation POC for CVE-2026-94134. Contribute to MosesOX/POC-CVE-2026-94134 development by creating an account on GitHub.

A blocker you can't bypass — the whole device, not a list of apps. Free to start, Pro one-time upgrade for longer sessions and unlimited scheduled blocks. - Auzeo/all-block

Stdlib-only Python network/service vulnerability scanner with HTML, JSON and auto-downloading PDF reports - D1vyanshSingh/vulnscan

Multi-threaded Python scanner that detects NTLM authentication over HTTP/HTTPS and SMB, parses NTLM challenge messages, and flags relay-attack risk — built for authorized penetration testing on Kal...

Contribute to ZeroDayEvil/CVE-2026-41651 development by creating an account on GitHub.

智慧校园平台 JWT 通配授权越权漏洞 — 完整授权测试方法论、PoC 工具链与脱敏数据集. Contribute to itsyhx/smart-campus-authz-audit development by creating an account on GitHub.

🛒 ShopManager — retail POS & inventory platform. Real-time stock, QR camera scanning, digital khata ledger, supplier ledgers, WhatsApp receipts, and MongoDB Charts analytics. Full-stack MER...

🛡️ Official AI Security Tool module for CVE-2026-31431 ("Copy Fail" / Linux algif_aead page-cache scratch-write LPE Exploit & Detector). - ZeroDayEvil/CVE-2026-31431

A Burp Suite extension for extracting PDF payloads from responses. - m0rtak/pdf-extractor-burpsuite

零第三方依赖的 Go MCP Server：stdio + Streamable HTTP，内置 web_search/web_fetch/kb_search/code_run/calc 五个工具，带 SSRF 防护与 Docker 沙箱 - qwe986050091/mcp-server-go

SSRF-safe fetch for user-supplied URLs: scheme allowlist, resolve-all-IPs is_global check, and per-hop redirect re-validation. The guard I put in front of every server-side URL fetch. - Themis-Foun...