Sanitises SVG files in Silverstripe CMS 6, so they can’t run script or load remote resources. Cleans uploads before they’re stored, fixes SVGs already in the asset store, inlines SVGs safely in tem...

Local inventory triage for Node2Shell (CVE-2026-111497): grade every Node, Bun and Brotli copy on disk. Detection-only, no network probes, no payloads. - foxcornlab/node2shell-inventory-scanner

Forensic analysis of a CVSS 9.6 Forever-Day: DOM-XSS escalating to unsandboxed Native RCE via UIWebView bridge in Mozilla Pocket iOS - FUNFACTOR1/Mozilla-Pocket-iOS-Forever-Day-DOM-XSS-to-RCE-via-U...

The layer that protects you. Proactive defense-in-depth Web Application Firewall mitigating recent critical PHP engine vulnerabilities including PHP2Shell (CVE-2026-109618/9), PHP-CGI Argument Inje...

Burp Suite 진단 정보 정리 extension. Contribute to 9u4a/reconhub development by creating an account on GitHub.

Home-network vulnerability scanner for Windows that tells you what it actually checked. Free Dec 15, 2026. - pubester1/device-defender-overview

Kit de la charla PHP2Shell (CVE-2026-109618/109619): deck, guion, Q&A, guia de parcheo y demos reproducibles. - GarciaG1/charla-php2shell

CVE-2026-109618_CVE-2026-109619. Contribute to Captain-AI-Hub/PHP2shell development by creating an account on GitHub.

Native x86/x64 BOFs for authorized Windows remote execution in Cobalt Strike and Sliver - rubyattack3r/Rex-BOF

Deliberately vulnerable PHP/MySQL shop with a secure mode, demostrating SQL injection, store XSS and weak password storage. - alfredo-dacosta/web-security-lab

SM-F9360 (Galaxy Z Fold4, q4q) locked-bootloader KernelSU root — CVE-2026-43499 temp root → LD_PRELOAD DEFEX bypass → no-LTO clang-12 kernelsu.ko. Device-verified 2026-08-12. - E-R-Butch/F9360-CVE4...

Read-only auditor for CVE-2026-109618 / CVE-2026-109619 — seven independent PHP exposure axes across distro backports, Docker, cPanel and LiteSpeed stacks. - hanyuanchen08-netizen/php-exposure-audit

Universal Security Hub & 1-Line Hotpatching Engine for End-Of-Life PHP (5.4–8.1). Backported CVE patches (php2shell, CGI injection, filter chains), zero-downtime runtime armor, and automate...

Python-based dependency vulnerability scanner using the OSV API - Tahakhalid74/python-sbom-agent

A portable, fully integrated, and production-ready Linux deployment package for Burp Suite Professional with dynamic JVM pathing and native desktop/dock integration. - belsopky/Burp-Suite-Professio...

钓鱼邮件识别训练. Contribute to Jiafu318/wkj-phishing development by creating an account on GitHub.

Realistic multi-version lab + toolkit for the PHP php2shell pre-auth RCE (CVE-2026-109618/109619): detect, blindly prove, and understand it. No shared mounts, no planted files, no LFI. - RedSideSec...

pHp2Shell CVE 2016 109618 - 109619. Contribute to fahise/cve-2026-109618-cve-2026-109619-poc development by creating an account on GitHub.

Detection-only exposure scanner for PHP2Shell (CVE-2026-109618/109619): finds PHP across repositories, hosts, a network perimeter, and AWS, and grades each install by version and config without tri...

本项目为一个收集安全漏洞并提供AI学习网络安全知识的系统，有非常多的公开已知的漏洞可供学习，均为网上已公开的漏洞。并提供一个可自建、可复现的 AI 攻防靶场：内置一套企业级采购审批系统作为靶标，红队自动渗透、蓝队自动修复，全程可观测、可复盘、可跟练。规则上线前必须通过「召回 100% + 误杀 0%」的确定性闸门。项目附带AI开发与自动进行测试防御与攻击，旨在进入AI开发时代可以让开发者更好...

Burp Suite extension: auto-decompress Content-Encoding: zstd responses + editable Zstd tab (auto re-compress on send). JSON pretty-print. No conflict with HAE. - Yv-suian/burp-zstd