A Python-based static file analyzer using SHA-256, YARA rules, a Tkinter GUI, JSON reports, and automated tests. - PengwinKingdom/ThreatLens

php2shell (CVE-2026-109618/109619) reproduction lab — lab only, targets the vulnerable php:8.5.11 images - iliaal/php2shell

Contribute to 794pn2s6fh-hub/kernel-cve-PoC development by creating an account on GitHub.

WSTG-based web vulnerability scanner with GUI: intercepting proxy, async mutation scan engine, 38 OWASP WSTG checks, evidence & reports - Nottopbut/notscan

Netflix Atlas :re operator unbounded regex 0day (Query.scala) — single-request permanent actor deadlock; PR #1913 incomplete fix; plus Parser.pop {2} IndexOutOfBoundsException. Kanit + PoC + exploi...

PoC: aicr fern-docs-preview-comment untrusted artifact -> npm registry hijack -> workflow_run RCE - PDFtoMark/gab-poc-aicr-fern-npmrc

PoC: workflow_run artifact -> privileged RCE (nodewright fern preview) - PDFtoMark/gab-poc-fern-preview

Purple-team PoC: a Sliver C2 agent in QEMU with process-hiding via the Diamorphine LKM, built to test EDR/detection coverage. - inneromost/lurked

Malware scanner for container images: daemonless, layer-aware, ClamAV and YARA - movray/meles

Reproducible lab and network PoCs for HAProxy QUIC CVE-2026-26080 and CVE-2026-26081 - Zeerg/haproxy-quic-cves-2026

PoC: OpenShell release-canary workflow_run head_sha install.sh RCE - PDFtoMark/gab-poc-openshell-canary

poc workflow_run fork PR privileged RCE. Contribute to PDFtoMark/gab-poc-wfr-fork-pr development by creating an account on GitHub.

IOCs, YARA & Sigma rules and bilingual analysis of the "EaseUS Partition Master 2026" fake-crack campaign (Trojan.PavinLoader). No samples hosted. - fotedev/pavinloader-easeus-campaign

C/C++ AV engine with multi-method detection, plugged directly into the AkesoEDR kernel stack - derekxmartin/AkesoAV

A Python Flask security project exploring Cross-Site Scripting (XSS) prevention through context-aware encoding, HTML sanitization, CSP, secure headers, and DOM protection. Copy description - Alirez...

Contribute to 794pn2s6fh-hub/CVE-2026-112621- development by creating an account on GitHub.

OPPO A96 (PFUM10) post-relock toolkit: CVE-2026-43499 chain -> real BakaSU driver, ocsk kernel defense probes vs OPPO OPLUS_ROOT_CHECK, boot restore scripts - poisongod/BakaSU-PostLock

Weaponized CVE-2026-112396 (Pillow heap use-after-free): deterministic heap grooming, file-triggered chain, attacker-chosen post-free writes - verified PoCs, evidence, CI. Plus pypdf CVE-2026-11379...

Reverse-engineering writeup, YARA rules and IOCs for the Akuma Stealer MaaS infostealer (detection/intel only) - NotAlexei/akuma-stealer-analysis

Race trigger, heap-reuse oracle, pcap analysis, detection and mitigation tooling for CVE-2026-98432 (Linux IPv4/TCP ireq_opt use-after-free). - H1z3-br0/CVE-2026-98432

CVE-2026-98432 (Linux IPv4 TCP use-after-free): how to check your server, apply a stopgap, and clean up after the fix - mahdi-salmanzade/CVE-2026-98432