Static malware analysis reports with IOCs, YARA and Sigma detection rules, and the tooling written for each sample. Defensive use only. No runnable malware is published. - IAmForeverAloneToo/malwar...

POC: GitHub sign-in broker (stateless OAuth code exchange) for the portal Deployments tab — private-* naming, public only because the POC org is on Free - godronus-org/private-gh-broker

CVE-2026-97229 + CVE-2026-110264 — GitLab Onigmo RCE Exploit Toolkit (CVSS 10.0) - murat-levi/gitlab-rce-toolkit

CVE-2026-56190 - Windows RDP Server Uninitialized Resource leads to RCE - Udyz/RDPBleed

Supabase RLS Scanner Burp Extension. Contribute to Securify-AI/Supabase-RLS-Extension development by creating an account on GitHub.

Hunting pack for PHP2Shell (CVE-2026-109618/109619): find vulnerable PHP assets and hunt for exploitation with Microsoft Defender, Sentinel and Azure tooling - cseelhoff-ms/php2shell-hunting-pack

Exploit for CVE-2026-104286 — FortiMail: Unauthenticated Arbitrary File Write → Code Execution - maxprog-svg/CVE-2026-104286

Pgweb 0Day: unauthenticated SQL access and conditional OS command execution, with redacted evidence and an English PoC. - QiLiLab/pgweb-unauthenticated-sql-rce

VulnShield is a Python-based mini vulnerability scanner designed to identify basic security issues in websites. It scans authorized target URLs, checks HTTP security headers, detects common configu...

Interactive NGINX CVE-2026-42945 educational simulation built with HTML, CSS, and JavaScript. Features vulnerable and patched modes, synthetic request inspection, memory visualization, event loggin...

🛡️ 57 篇网安自学笔记：Linux → 前后端开发 → Web 攻防 → 代码审计 → 信息收集，按完整学习路线组织的渗透测试向知识库 - xed686/Erdamin-s-Obsidian

Authentication bypass leading to remote code execution in Domoticz 2026.3 and earlier - QiLiLab/domoticz-2026.3-auth-bypass-rce

Verified CVE-2026-98260 Android port for Xiaomi 15 dada OS4.0.0.22.XOCCNXM - quyicheng03-boop/CVE-2026-98260-dada-android

PoC CVE-2026-88804 (Rancher). Contribute to R0gfall/CVE-2026-88804 development by creating an account on GitHub.

Silver-to-entry-Gold web CTF based on URL parser differential SSRF - sigure21/citation-needed-ctf

Semgrep rules for application-security bug classes found in real code — SSRF rebind bypass, vm sandbox denylists, RLS view leaks, wire-sized allocations, timing compares. Every rule has test fixtur...

Website Vulnerability Scanner. Contribute to VishvijayPS/WebShield development by creating an account on GitHub.

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research. - skill-tzy/php2shell-poc

gab PoC: issue_comment body injection (pr-comment-action.yml pattern) - PDFtoMark/gab-poc-issue-comment-rce

Static-analysis case study of a malicious repo that hid JavaScript in fake font files and auto-ran it via a VS Code folderOpen task, plus a related Python stealer sample, IOCs, YARA/Sigma rules, an...