Contribute to Balavardhan26/OWASP-Juice-Shop-DOM-Based-Cross-Site-Scripting-DOM-XSS- development by creating an account on GitHub.

Python network and vulnerability scanner. Contribute to thedirtypeach/PyVenom development by creating an account on GitHub.

Automated bug fixer and security vulnerability scanner for source code⁠ - AmmarHassanin/code-security-scanner

Find ADAudit Plus web servers in nmap output and triage CVE-2026-6516 (pre-auth RCE) in a single dependency-free Python file. - t3chn0t3s-org/cve-2026-6516-scanner

Hidra - A12 / iOS 18.7.2 jailbreak research. Kernel entry via AppleJPEGDriver CVE-2026-20687. No public build yet. - nenasevartem70-cmyk/hidra

CVE-2026-98432: a plain IPv4 TCP server is vulnerable, MPTCP is not the trigger. Bug trigger, evidence and analysis. - offline-ant/tcp2kaslr

Exploit for CVE-2023-43364 | Searchor <2.4.2 - Arbitrary Code Execution - diamorphine666/CVE-2023-43364

PoC: workflow_run release-notifications RCE. Contribute to PDFtoMark/gab-poc-release-notify development by creating an account on GitHub.

ios.coruna漏洞.darksword漏洞. Contribute to prestonh965118/I0S.coruna-darksword-.I0s- development by creating an account on GitHub.

Contribute to rc4/yara-rules development by creating an account on GitHub.

PoC: internal payment service (Java 21, Spring Boot 4, Stripe) built with a production-grade AI-assisted workflow - bsamsonov/payment-service-poc

Crash-only public-API reproducer for CVE-2026-112705 in AVEVideoEncoder - Lak453/CVE-2026-112705-poc

PoC: workflow_run artifact -> workspace npm lifecycle RCE - PDFtoMark/gab-poc-adp-linter

Contribute to davtur19/PoC-CVE-2026-89020-PrivEsc development by creating an account on GitHub.

CVE-2026-103688: Checkout Files Upload for WooCommerce < 2.4.0 unauthenticated arbitrary file upload to RCE. PoC by NOXCRYPT (noxcrypt-x). - noxcrypt-x/CVE-2026-103688

c2 over icmp simple implementation for a uni degree - 0773rr/c2-over-icmp

PoC: workflow_run artifact-name injection to shell - PDFtoMark/gab-poc-artifactname-rce

CVE-2026-109384: IvyForms <= 1.5.1 unauthenticated arbitrary file upload to RCE. PoC by NOXCRYPT (noxcrypt-x). - noxcrypt-x/CVE-2026-109384

Self-hosted blind XSS callback collector. Contribute to Pebl3/xss-catcher development by creating an account on GitHub.

University skill-sharing app built with FastAPI, Supabase and vanilla JavaScript, with documented XSS and access-control remediation. - can-yazicioglu/SkillSwap

A Ship of Harkinian port of Triforce% — the legendary TASBot Ocarina of Time ACE run — rebuilt as a real, playable quest instead of an exploit. Custom scenes, actors and cutscenes recreate the Unic...