PoC, Docker lab, and technical report for CVE-2026-111497 (Node2Shell) — Node.js Brotli decoder invalid block-switch OOB write; validated errno differential and weaponized remote DoS, RCE analysis ...

PoC, reproducible labs, live evidence, Nuclei fingerprint, and technical report for CVE-2026-110264 — GitLab Org-mode/Onigmo unauthenticated RCE (CVSS 10.0); render oracle validated on GitLab CE 19...

AttackPilot 是一个基于多智能体的链上攻击复盘平台。从交易哈希出发，系统能够关联分析多笔交易中的准备、触发和获利步骤，定位漏洞根因、生成修复补丁，并通过原版与补丁版回放对比验证修复效果。同时，平台接入 Chainlink 历史价格数据，为资金变化提供可追溯的估值参考，帮助开发者和安全研究员减少重复取证、验证与报告整理的人工投入。 - dy-iy/AttackPilot

Standalone defensive checker project for CVE-2026-104935: Ivanti Connect Secure: Authentication bypass by spoofing. One exploit per repository; implementation pending. - completetech-security/ivant...

Gitea LFI to RCE exploit (CVE-2026-59774) — arbitrary file read via Org-mode #+INCLUDE, chained to remote code execution through git hook injection - Ly0kha/CVE-2026-59774

A Python-based mini vulnerability scanner that checks for open ports and HTTP security headers. - Solai-26/Vulnerability-Scanner

Django board demo showing stored and reflected XSS and defending with output escaping and a Content-Security-Policy (local lab). - wkdwlsdyd0801-pixel/django-xss-lab

Contribute to lesterlam/node2shell development by creating an account on GitHub.

AI-powered web vulnerability scanner for automated security testing, CVE intelligence, and intelligent vulnerability reporting. - CipherAnvil/VulnStrike-AI

Lightweight Linux container runtime: WebTerminal, Vulnerability Scanner, AI Optimizer, Cost Calculator, K8s Export. 12300+ lines of Go. - cokovali10-sketch/NanoContainer

🛡️ Repository Description: Advanced Payload Collection - Talhaaashraf/TalXSS--XSS-Assessment

Large-scale evaluation and benchmarking of open-source Web Application Firewalls (ModSecurity & NAXSI) across 20,000+ custom-scripted attack payloads (SQLi, XSS, Path Traversal, XXE). - Azw...

Contribute to mankhec/RAT-Simulation-And-YARA-Malware-Scanner-Main development by creating an account on GitHub.

CVE-2026-111497 (Node2Shell): deteccion del decoder Brotli vulnerable en Python y Node por el codigo de error real del decoder, con laboratorio HTTP local - s1ko/poc-cve-2026-111497

CVE-2026-114509 — Laravel TokenGuard authentication bypass (CVSS 9.2): PoC, root-cause analysis, Docker lab, and reproduction guide - ArioVeisa/cve-2026-114509-laravel-tokenguard

OpenAsy Malware agent: scans its host and the servers in hosts.yaml with ClamAV and YARA, read-only, and sends detections to malware. - openasy/malware-agent

Production-grade EDR/Antivirus Engine - Rust, YARA, ML, Real-time monitoring, Encrypted quarantine, REST API, Web UI - cokovali10-sketch/CoreEDR

verdict - It contains RCE, use it on your own risk - tarun1sisodia/PHP2SHELL

Solidity/Foundry PoC demonstrating a rounding exploit in Morpho Midnight. - vaultvult/tenor-labs-solidity

exploit php2shell (CVE-2026-109618 / CVE-2026-109619) for educational purposes - zr0n/php2shell