iQOO Neo7 竞速版 (PD2232/V2232A) 临时 root — CVE-2026-43284 页缓存写 + KernelSU LKM late-load。实机验证通过。 - q181555/pd2232-dirtyfrag

Apache Airflow < 3.4.0: scheduler-side deserialization of task-controlled XCom (CVE-2026-86829) leading to code execution in the scheduler process. PoC, fixed-version control, and a triggere...

Content-aware validation and sanitization of file uploads for Django, Flask and FastAPI. Detects disguised and malicious files by their bytes, not their names. - IV1T3/uploadshield

轻量智能合约安全漏洞案例库：收录 Solidity 经典安全漏洞，包含原理、漏洞代码、POC 与修复方案，面向区块链初学者 - zby193/smart-contract-vuln-case-lib_55

Python + Pytest 接口自动化与 UI 自动化实战框架合集（数据驱动 / MySQL 断言 / Allure 报告 / 越权漏洞检测） - 2481545332/QA-Automation-Portfolio

POC for CVE-2026-92414 - Apache Jackrabbit WebDAV preauth session hijack via derivable lock tokens. Verified against 2.22.4, control on fixed 2.22.5. - fixedbyreboot/CVE-2026-92414-POC

POC for CVE-2026-90436 - unauthenticated remote class instantiation in Apache Axis 1.x via SOAP fault exceptionName, bypassing configured auth handlers. EOL software, no fix exists. - fixedbyreboot...

POC exploit for CVE-2026-73665 - unauthenticated RCE in FreePBX UCP via Socket.IO namespace auth bypass feeding CRLF injection into the Asterisk Manager Interface. Vulnerable 17.0.7 lab vs patched ...

POC exploit for CVE-2026-68524 - preauth RCE in Apache OFBiz via request body shadowing the decorator location and file URI screen loading. Verified on 24.09.07, control on 24.09.08. - fixedbyreboo...

This is a Red Team & Penetration Test framework and toolkit for MacOS. - Rikuxx0/RedTeam_Toolkit_for_Mac

Python web vulnerability scanner that checks security headers, SSL expiry, SQLi error reflection, and web ports, and saves the report to web_report.json. - lucas-The-Coder/WebHawk

Vulnerability Scanner for Identifying System Weaknesses – Owoeye Yusuf Olawale - goodluckworji1-boop/vulnerability-scanner

Web 漏洞原理与实操手册（新手版）：DVWA/Pikachu/Juice Shop 本地靶场，11 类漏洞的原理·最小证明·判读·修复 - D4C-wof/web-vuln-handbook

FiberHome SR1041D RP0100 (China Unicom) pre-auth info leak, root RCE and telnet interface PoCs - Steve49047/fiberhome-sr1041d-vuln

CVE-2026-125757 Exploit — mailcow domain-wide footer SSTI via rspamd's jinja/lupa engine, enabling cross-tenant RCE in the shared rspamd container. - Faceless0x7/CVE-2026-125757

Repositório dedicado a POC com SpringBoot. Contribute to SSKings/Projetos-JAVA-Spring-Back-End- development by creating an account on GitHub.

Python-based advanced web vulnerability scanner featuring 18 detection modules, Playwright browser automation, and CVSS/CWE-based reporting. - shweta-kawle/VULGCH-Advanced-Web-Vulnerability-Scanner

Contribute to Jaarden/DWARF3-RCE development by creating an account on GitHub.

Signal Console, Community Edition: the web console for Signal, the read-only Windows DFIR survey by Intrusion Academy. Import every host's Signal run and see where to look first and what ea...