CVE-2026-125757 Exploit — mailcow domain-wide footer SSTI via rspamd's jinja/lupa engine, enabling cross-tenant RCE in the shared rspamd container. - Faceless0x7/CVE-2026-125757

Repositório dedicado a POC com SpringBoot. Contribute to SSKings/Projetos-JAVA-Spring-Back-End- development by creating an account on GitHub.

Python-based advanced web vulnerability scanner featuring 18 detection modules, Playwright browser automation, and CVSS/CWE-based reporting. - shweta-kawle/VULGCH-Advanced-Web-Vulnerability-Scanner

Contribute to Jaarden/DWARF3-RCE development by creating an account on GitHub.

Signal Console, Community Edition: the web console for Signal, the read-only Windows DFIR survey by Intrusion Academy. Import every host's Signal run and see where to look first and what ea...

镜像 SBOM 漏洞可达性图谱与修复优先台：镜像 SBOM 漏洞可达性图谱与修复优先台：从 SBOM 出发做调用关系可达性分析，剔除不可达 CVE 噪音，并让每一次豁免都有可复核的调用点证据。 - kekelele996/gb-558-vulngraph

Contribute to d4ytox/CVE-2021-22205 development by creating an account on GitHub.

Vulnerability & exploit intelligence — ExploitDB, NVD, Metasploit search with CVE→ATT&CK mapping and LogNorm/HuntForge integration | Part of Nebula Forge - Rootless-Ghost/VulnForge

Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation - michalbednarski/TheLastBundleMismatch

OTP Bypass | Authentication Security | Understanding OTP vulnerabilities and digital account protection - owner-of-otp-bypasser/OTP-Bypass-

JA3/JA3S TLS fingerprinting tool written in Go. Identifies what software is making TLS connections by parsing raw ClientHello messages — detects browsers, scanners, pentest frameworks, and malware ...

Fuzzer concurrente de métodos HTTP y path traversal para microservicios SOAP/HTTP. Acepta curl o colecciones Postman, enruta por Burp y detecta malas prácticas analizando solo cabeceras y códigos d...

Guard for Linux desktops: watches autostart, services, cron and other persistence spots, scans downloads with YARA-X, hash lists and ClamAV, blocks known malware from /tmp - Two-Play/wachposten

Hybrid AI + rule-based web vulnerability scanner (OWASP Top 10) with a Chrome extension - sonal-afk/webguard

Technical analysis and skeleton PoC for CVE-2026-125350 (Chrome XML UAF) - Frostmoon39206/CVE-2026-125350-PoC

PoC — CVE-2026-66613: JetEngine (Crocoblock) Timber/Twig Views unauthenticated RCE (authorized security research) - aramosf/CVE-2026-66613

Technical malware analysis report on Vidar Stealer, detailing static/dynamic behavior and YARA detection rules. - code9grey/Malware-Analysis---Vidar-InfoStealer

To-do API PoC: Spring Cloud Gateway, JWT auth service, MCP server, nginx and Postgres via docker compose - gnagamohan/apis_poc

An AI-powered Python SAST vulnerability scanner for VS Code powered by Google Gemini and deterministic CVSS v3.1 severity scoring. - yessin-ze/ai-security-scanner-vscode-extension

Contribute to PurpleTeamSoftwareSolutions/cyberoptix.burp-extension development by creating an account on GitHub.

CCSO Workshop: Shellcode loader exercise. Contribute to shreyas-challa/babys-first-malware development by creating an account on GitHub.