Archived IoT & CVE exploit PoCs, scanners, loaders, and research stacks. Authorized security research only. - murrez/pocbit-archive

**Static AST Taint & Vulnerability Analysis** — Sovereign **TypeScript 5.x** Cybersecurity & Protection Engine (`xss-dom-sink-tracer`). - ElNeMeR70/cyber-sast-ts-xss-dom-sink-tracer

**Static AST Taint & Vulnerability Analysis** — Sovereign **POSIX Bash** Cybersecurity & Protection Engine (`xss-dom-sink-tracer`). - ElNeMeR70/cyber-sast-sh-xss-dom-sink-tracer

Security advisories your scanner can't see yet: published by maintainers, not yet reviewed into GitHub's database or OSV. Live tracker, open OSV feed, and a CI watcher for GitLab, G...

**Static AST Taint & Vulnerability Analysis** — Sovereign **Rust 2021** Cybersecurity & Protection Engine (`xss-dom-sink-tracer`). - ElNeMeR70/cyber-sast-rs-xss-dom-sink-tracer

**Static AST Taint & Vulnerability Analysis** — Sovereign **Python 3.12** Cybersecurity & Protection Engine (`xss-dom-sink-tracer`). - ElNeMeR70/cyber-sast-py-xss-dom-sink-tracer

Offensive Security Specialist | Penetration Tester | CVE Researcher | Exploit Developer - Ghost-Bx1/Ghost-Bx1

Fork de mitschud/DirtyFrag (CVE-2026-43284 page-cache exploit) con port G998U — ko dfroot-android15-5.4.ko embebido para SM-G998U/HZB1 (kernel 5.4.274-qgki). Flujo de app oficial diabl0w/DFRoot; ma...

由SuperAudit和SliceAudit发现的漏洞PoC和报告. Contribute to qrn12580/vulnerability-PoC development by creating an account on GitHub.

URL and content safety rules for the HOP family as one Laravel package: destinations judged against keyword patterns, risky hosts, blacklists and threat feeds; an SSRF-safe UrlGuard that pins DNS; ...

PoC for CVE-2026-121265 (SQL::Abstract < 2.000003 arrayref SQL injection, CWE-89): INSERT/UPDATE exfiltration, privilege escalation and generate()/AUTOLOAD vectors, validated in a containeri...

CVE-2026-112611: OOB Write in CoreGraphics (PDF ShadingType 5) via /N and /C0 array mismatch. Causes heap overflow (DoS). The Python PoC generates the malicious PDF, while the C-code uses a SIGSEGV...

Extensible CVE-oriented binary vulnerability scanner using machine-code signatures. - Andrew-Job/vuln_imprint

Automated detection of SQL Injection and Cross-Site Scripting vulnerabilities using Python - mohd840/web-vulnerability-scanner-mini-project

Automate Windows forensic examinations: parse disk images, surface artifacts for DLP, USB, malware, phishing, ransomware, and generate court-ready reports. - NguyenmToi/windows-forensic-automation

Production offline malware scanning and threat defense engine combining curated YARA rule compilation and ClamAV integration. - Ethan-da-Tech-Wizard/yara-threat-defense-engine

CVE-2026-98260（exec 非主线程 + POSIX CPU timer UAF）在荣耀 Magic6 Pro（BVL-AN16，内核 6.1.157）上的移植与利用实现：源码、构建脚本、偏移与 slab 参数记录。 - knowlily/cve-2026-98260-bvl-an16

Production DevSecOps CI/CD pipeline, multi-stage hardened Docker containerization, YARA vetting, Trivy CVE scanning, SPDX SBOM generation, and architectural whitepapers. - Ethan-da-Tech-Wizard/devs...