fastjson rce 记录. Contribute to Liki4/fastjson_gadget_free_rce development by creating an account on GitHub.

显然极域的漏洞有些过多了。之前有UDP重放攻击，而最近本人又发现了两个教师端的漏洞，组合在一起，就是一条完整的RCE攻击链。快去请老师吃烩面吧~ - yanghua11/MythwareTeacherVuln-2016

Offline Next.js use-cache evidence checker for GHSA-673q-mjm6-r5xr. Next.js cache and typed-array evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads. - CompleTetech-Security/ne...

Static malware analysis platform: pefile + LIEF PE parsing, strings and entropy, custom YARA rules, explainable risk score, optional OpenAI behavior summaries; FastAPI, React, Docker - arjunpotluri...

Pre-auth RCE against WordPress (7.1.2/7.1.3) via PHP2Shell CVE-2026-109618 / CVE-2026-109619 - kjry8sb/php2shell-wordpress-rce-fullchain

Standalone defensive checker project for CVE-2026-102255: SonicWall SMA1000 (6210, 7210, 8200v): Pre-authentication server-side request forgery. One exploit per repository; implementation pending. ...

Standalone defensive checker project for CVE-2026-88778: Citrix NetScaler ADC / Gateway: Predictable TCP initial sequence numbers. One exploit per repository; implementation pending. - CompleTetech...

Standalone defensive checker project for CVE-2026-88777: Citrix NetScaler ADC / Gateway: Non-HTTP L7 memory corruption. One exploit per repository; implementation pending. - CompleTetech-Security/n...

Control plane of ltslab: CVE tracking, impact reports and backport procedures for the Spring Boot 3.5.x LTS builds - ltslab/lts-tracker

node2shell-detector - local + network detections for Node2Shell (CVE-2026-111497) by IONSEC. Python CLI: runtime posture, Brotli decoder fingerprints, dependency exposure, log fingerprints, opt-in ...

CVE-2026-98260 (exec: posix CPU timer UAF) - one-command temporary root for OnePlus 16 (PYB110) from uid 2000 shell, with KernelSU/FinaSU handover - AzirX1337/CVE-2026-98260-OnePlus16-PYB110-Jailbreak

PHP2Shell — Unauthenticated RCE chain exploiting CVE-2026-109618 (OOM memory corruption) + CVE-2026-109619 (stale global state) in PHP. - Nostraxiten/PHP2shell

This is a custom template for nuclei. Contribute to lowk3v/nuclei-templates development by creating an account on GitHub.

CVE-2026-75650 (StyleSmuggler): unauthenticated RCE via template injection in Magento Open Source / Adobe Commerce 2.4.4–2.4.9 — b63 showcase, lab-verified with patched-build negative test - basesi...

🖥️ Windows 环境管家：用户/系统环境变量真实读写；PATH 条目级编辑 + 失效目录检测 + 并发外部修改三方合并保护；Node.js / Temurin JDK / Go / Python / Rust 等运行时检测、托管安装与版本切换（官方归档 + SHA-256/签名校验，绝不伪装检测结果）。每次修改前自动备份，写入后读回验证并广播系统变更；默认非提权运行、逐操作 UAC。T...

vulnerability scanner python based. Contribute to DEEPIKAA-1709/vulnerability-scanner development by creating an account on GitHub.

A CVE/vulnerability scanner I built for my cybersecurity internship at Syntecxhub that grabs service banners and checks them against the real NVD API, producing a severity-sorted report. - KiNgSlaY...

A full-stack network and web vulnerability scanner built with React and Flask for educational security testing - 310625149054-dotcom/vulnsight-vulnerability-scanner

Free, source-included white-box web exploitation labs for OSWE-style prep. Read the code, find the chain, write the exploit — every lab ends in RCE. - cyb3radull4m/cyb3radull4m-labs

一个不会过期的设置页：规则、组件注册表、接口文档、Wiki 各读一份仓库源文件；附开发/线上模式与上线前漏洞扫描门禁。零依赖、只读、不联网。作者 chaierss · chaierss.fun - Chaierss/keel

Cybersecurity project demonstrating secure web development, user authentication, password hashing, SQL Injection (SQLi), Stored XSS, and vulnerability mitigation through vulnerable and secure imple...