Standalone defensive checker project for CVE-2026-56846: Node.js: HTTP/2 retained header memory exhaustion. One exploit per repository; implementation pending. - CompleteTech-LLC/node-cve-2026-5684...

Offline evidence checker for NetScaler CVE-2026-88771. Edition-aware firmware assessment, separate threat metadata, standalone Python, no exploit payloads. - CompleteTech-LLC/netscaler-cve-2026-887...

regex2shell (CVE-2026-110264 + family) — GitLab/Onigmo unauth regex RCE research: safe differential detector, deterministic interpreter kill, match-time write primitive - FranklinF25/regex2shell

BOF that enables SeDebugPrivilege on the current process and injects shellcode into a target process. Designed for AdaptixC2. Not OpSec safe by default. - retimax/SeDebugPrivilege-BOF

Passive Java/J2EE vulnerability scanner plugin for Caido (the Caido equivalent of Burp J2EEScan). - HiJynx/caido-j2eescan

Standalone defensive checker project for CVE-2026-88773: Citrix NetScaler ADC / Gateway: HTTP request smuggling. One exploit per repository; implementation pending. - CompleteTech-LLC/netscaler-cve...

Standalone defensive checker project for CVE-2026-88778: Citrix NetScaler ADC / Gateway: Predictable TCP initial sequence numbers. One exploit per repository; implementation pending. - CompleteTech...

A tiny YARA-style rule engine in pure Python: rule parser, Aho-Corasick single-pass matching, hex/regex strings, secret & file-type rules - HisokaDrip/pyara

CVE-2026-109619 PoC lab. Contribute to Taz1920/cve-2026-109619 development by creating an account on GitHub.

Standalone defensive checker project for CVE-2026-102256: SonicWall SMA1000 (6210, 7210, 8200v): Authenticated remote code execution. One exploit per repository; implementation pending. - CompleteT...

Malware analysis case study: what Windows Defender flagged in an archive.org J2ME phone-game dump (static triage, VirusTotal enrichment, IOCs, YARA) - talls2/j2me-dump-malware-analysis

PHP 8.5.11 - Critical - Remote - UAF - CVE-2026-109619 PHP2Shell. Same-worker fatal backtrace then INI diagnostic on Apache mod_php. Lab vs 8.5.12. Advisory RCE inferred. - abraxas/php-stale-global...

PHP 8.4.26 - Critical - Remote - OOM longjmp - CVE-2026-109618 PHP2Shell. Unauth chunked multipart hits memory_limit before app code on Apache mod_php. Lab vs 8.4.27. Advisory RCE inferred. - abrax...

By combining CISA KEV (active weaponization signal), OSV.dev (ecosystem package-version boundary mapping), and deps.dev (reverse-dependency topological reach), this repository acts as an Action Dis...

Phishing awareness demo: fake QQ login page that reveals itself right after submit; records nothing. 钓鱼安全教育演示 - Principia-rain/phishing-demo

Research lab reproducing a target-specific Python Brotli 1.2.0 decoder RCE chain in Docker - ninj4c0d3r/python2shell

Contribute to Xiangmin-Li/my-poc-cve development by creating an account on GitHub.

Independent verification of CVE-2026-109618 / CVE-2026-109619 (private review copy) - JoshRob297/php2shell-research

CVE-2026-109618 & CVE-2026-109619 — PHP Pre-Auth RCE Exploit & Detection Toolkit - DARKSTUFF-LAB/php2shell-poc

Herramienta de diagnóstico de seguridad web en Python (checks pasivos OWASP y pruebas activas opt-in de XSS/SQLi/SSTI), con CLI e interfaz web, diseño anti-SSRF y 29 pruebas automatizadas. - MauExp...

Four months of MITRE rejections, retroactive SECURITY.md/CVE changes, CISA acknowledging CVE eligibility but refusing to act, and CERT/CC closing the case unresolved. The result: a second independe...