AI-powered mobile network vulnerability scanner for auditing physical payment terminals (POS) using orchestrated local agents and System One models. - WilsonArchanjoJunior/spyrraw

CORD threat reports: campaigns, infrastructure, indicators, YARA rules and recovery steps - 0xcaecffd/cord-reports

Sanitises SVG files in Silverstripe CMS 6, so they can’t run script or load remote resources. Cleans uploads before they’re stored, fixes SVGs already in the asset store, inlines SVGs safely in tem...

Local inventory triage for Node2Shell (CVE-2026-111497): grade every Node, Bun and Brotli copy on disk. Detection-only, no network probes, no payloads. - foxcornlab/node2shell-inventory-scanner

Forensic analysis of a CVSS 9.6 Forever-Day: DOM-XSS escalating to unsandboxed Native RCE via UIWebView bridge in Mozilla Pocket iOS - FUNFACTOR1/Mozilla-Pocket-iOS-Forever-Day-DOM-XSS-to-RCE-via-U...

The layer that protects you. Proactive defense-in-depth Web Application Firewall mitigating recent critical PHP engine vulnerabilities including PHP2Shell (CVE-2026-109618/9), PHP-CGI Argument Inje...

Burp Suite 진단 정보 정리 extension. Contribute to 9u4a/reconhub development by creating an account on GitHub.

Home-network vulnerability scanner for Windows that tells you what it actually checked. Free Dec 15, 2026. - pubester1/device-defender-overview

Kit de la charla PHP2Shell (CVE-2026-109618/109619): deck, guion, Q&A, guia de parcheo y demos reproducibles. - GarciaG1/charla-php2shell

CVE-2026-109618_CVE-2026-109619. Contribute to Captain-AI-Hub/PHP2shell development by creating an account on GitHub.

Native x86/x64 BOFs for authorized Windows remote execution in Cobalt Strike and Sliver - rubyattack3r/Rex-BOF

Deliberately vulnerable PHP/MySQL shop with a secure mode, demostrating SQL injection, store XSS and weak password storage. - alfredo-dacosta/web-security-lab

SM-F9360 (Galaxy Z Fold4, q4q) locked-bootloader KernelSU root — CVE-2026-43499 temp root → LD_PRELOAD DEFEX bypass → no-LTO clang-12 kernelsu.ko. Device-verified 2026-08-12. - E-R-Butch/F9360-CVE4...

Read-only auditor for CVE-2026-109618 / CVE-2026-109619 — seven independent PHP exposure axes across distro backports, Docker, cPanel and LiteSpeed stacks. - hanyuanchen08-netizen/php-exposure-audit

Universal Security Hub & 1-Line Hotpatching Engine for End-Of-Life PHP (5.4–8.1). Backported CVE patches (php2shell, CGI injection, filter chains), zero-downtime runtime armor, and automate...

Python-based dependency vulnerability scanner using the OSV API - Tahakhalid74/python-sbom-agent

A portable, fully integrated, and production-ready Linux deployment package for Burp Suite Professional with dynamic JVM pathing and native desktop/dock integration. - belsopky/Burp-Suite-Professio...

钓鱼邮件识别训练. Contribute to Jiafu318/wkj-phishing development by creating an account on GitHub.

Realistic multi-version lab + toolkit for the PHP php2shell pre-auth RCE (CVE-2026-109618/109619): detect, blindly prove, and understand it. No shared mounts, no planted files, no LFI. - RedSideSec...

pHp2Shell CVE 2016 109618 - 109619. Contribute to fahise/cve-2026-109618-cve-2026-109619-poc development by creating an account on GitHub.

Detection-only exposure scanner for PHP2Shell (CVE-2026-109618/109619): finds PHP across repositories, hosts, a network perimeter, and AWS, and grades each install by version and config without tri...