This is my e-commerce website project, incorporating technologies and components such as Python, Docker, microservices architecture, and security measures; it serves as a significant milestone in m...

10 pristine CVE RCE lab targets (vulhub/official images, no flag, no CTF artifact) - internal security research - elonma-china/lab-cve-pristine

Detection-only triage for Apache HTTP Server 2.4.71 batch: CVE-2026-119618 (mod_http2 RCE, CVSS 9.8), CVE-2026-106023, CVE-2026-109163. Grades httpd versions, catches the distro-backport and mod_h2...

Apache httpd mod_http2 (2.4.55-2.4.70) races on the connection allocator when assign_headers() writes the synthesised Content-Length: 0 into the shared stream table, corrupting the child heap. Cont...

Contribute to YuKongA/CVE-2026-98260 development by creating an account on GitHub.

A Vulnerability Scanner is a cybersecurity tool designed to identify security weaknesses in a computer system, network, or website. It scans for common vulnerabilities, detects potential security r...

Official Build & Verified Release | Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices - kush-coder/autopilot-vuls

CVE-2025-29927: Next.js middleware authorization bypass. Lab-only PoC, Sigma detection, remediation. Authorized testing only. - dexteon/nextjs-middleware-auth-bypass-cve-2025-29927

CVE-2024-8859: MLflow dbfs path traversal (arbitrary file read). Lab-only PoC, detection, remediation. Authorized testing only. - dexteon/mlflow-dbfs-path-traversal-cve-2024-8859

Lab-validated Nuclei templates authored by Securin and merged into projectdiscovery/nuclei-templates - securin-public/securin-nuclei-templates

Containerised PoC for CVE-2026-121653: unauthenticated SQL injection (CWE-89) in the Ivanti Endpoint Manager Core status-event service leads to RCE through the Core database account. A model of /WS...

Validated OT/ICS CVE POCs from 2026 with firmware verification - Schneider SCADAPack, Modicon M580, nanoMODBUS, IEC 104, TDengine, Langflow - dexteon/ot-ics-cve-pocs-2026

通研网络蜜罐. Contribute to tongyaninfo/tongyan-honeypot development by creating an account on GitHub.

Security Research Toolkit and HackSkills Knowledge Base - Authorized Penetration Testing, Bug Bounty, Web/API Security - 123caiji/security-research-toolkit

FortiGuard Labs companion for the Omarchy bar: Outbreak Alerts, Threat Signals, Fortinet PSIRT advisories and lookup. Not affiliated with Fortinet. - charbelsarkis/omarchy-bastion

Vulnerability (CVE) scanner for Nix/NixOS [maintainer=@henrirosten] - nix-community/vulnix

多内核代理管理面板：Xray / sing-box / mihomo / Hysteria2 统一管理，内置套餐售卖、用户中心、工单与多主控高可用 - PolarisPanelOrg/Polaris

Catch SSRF and credential leaks in UTCP manuals, MCP server configs and OpenAPI specs, before they reach CI. - boy-373/utcp-lint

CVE-2021-44228 Research, Attack Simulation and Blue Team Detection Lab - DatLang777/Log4Shell-BlueTeam-Detection-Lab

Official Build & Verified Release | 基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。 - kush-coder/autopilot-vulnclaw-v2

Signal K Server resources API path traversal audit (CVE-2026-123807): read JWT secret, forge admin token, verify RCE - qianlijaingshan/signalk-audit