A Claude Skill that passively checks whether a website (and optionally its subdomains) runs PHP, confirms the version where possible, and flags exposure to PHP2Shell (CVE-2026-109618 / CVE-2026-109...

Contribute to dakhilotmane045-ai/XSS-lab-v2 development by creating an account on GitHub.

HackerSignal (NeurIPS 2026 Evaluations & Datasets Track): a 7.45M-document cyber threat intelligence dataset and benchmark linking hacker-forum, exploit and advisory text to CVEs, with temp...

FIRST EPSS scores, score history, and CVE prioritization with caller-supplied severity. - cyanheads/first-epss-mcp-server

PHP2Shell. Contribute to EQSTLab/CVE-2026-109619 development by creating an account on GitHub.

Simple Virus uses Win32API to inject shellcode to ALL x64 PE in Windows - AnonymousdfadfaB/Simple-Virus

AI-powered mobile network vulnerability scanner for auditing physical payment terminals (POS) using orchestrated local agents and System One models. - WilsonArchanjoJunior/spyrraw

CORD threat reports: campaigns, infrastructure, indicators, YARA rules and recovery steps - 0xcaecffd/cord-reports

Sanitises SVG files in Silverstripe CMS 6, so they can’t run script or load remote resources. Cleans uploads before they’re stored, fixes SVGs already in the asset store, inlines SVGs safely in tem...

Local inventory triage for Node2Shell (CVE-2026-111497): grade every Node, Bun and Brotli copy on disk. Detection-only, no network probes, no payloads. - foxcornlab/node2shell-inventory-scanner

Forensic analysis of a CVSS 9.6 Forever-Day: DOM-XSS escalating to unsandboxed Native RCE via UIWebView bridge in Mozilla Pocket iOS - FUNFACTOR1/Mozilla-Pocket-iOS-Forever-Day-DOM-XSS-to-RCE-via-U...

The layer that protects you. Proactive defense-in-depth Web Application Firewall mitigating recent critical PHP engine vulnerabilities including PHP2Shell (CVE-2026-109618/9), PHP-CGI Argument Inje...

Burp Suite 진단 정보 정리 extension. Contribute to 9u4a/reconhub development by creating an account on GitHub.

Home-network vulnerability scanner for Windows that tells you what it actually checked. Free Dec 15, 2026. - pubester1/device-defender-overview

Kit de la charla PHP2Shell (CVE-2026-109618/109619): deck, guion, Q&A, guia de parcheo y demos reproducibles. - GarciaG1/charla-php2shell

CVE-2026-109618_CVE-2026-109619. Contribute to Captain-AI-Hub/PHP2shell development by creating an account on GitHub.

Native x86/x64 BOFs for authorized Windows remote execution in Cobalt Strike and Sliver - rubyattack3r/Rex-BOF

Deliberately vulnerable PHP/MySQL shop with a secure mode, demostrating SQL injection, store XSS and weak password storage. - alfredo-dacosta/web-security-lab

SM-F9360 (Galaxy Z Fold4, q4q) locked-bootloader KernelSU root — CVE-2026-43499 temp root → LD_PRELOAD DEFEX bypass → no-LTO clang-12 kernelsu.ko. Device-verified 2026-08-12. - E-R-Butch/F9360-CVE4...

Read-only auditor for CVE-2026-109618 / CVE-2026-109619 — seven independent PHP exposure axes across distro backports, Docker, cPanel and LiteSpeed stacks. - hanyuanchen08-netizen/php-exposure-audit

Universal Security Hub & 1-Line Hotpatching Engine for End-Of-Life PHP (5.4–8.1). Backported CVE patches (php2shell, CGI injection, filter chains), zero-downtime runtime armor, and automate...