Defensive, evidence-first web reconnaissance scanner (DNS, HTTP, TCP, TLS) with SSRF-safe networking and schema-validated reports - MounibAhmedAggoun/Sentinel

AI-Powered PE Malware Detection System using Machine Learning, YARA Signatures, Static PE Header Analysis, and SHAP Explainable AI. - Joyunto111/ai-malware-detector

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.9 — unauthenticated PHP Object Injection to RCE (CVE-2026-125855 == CVE-2026-119077). PoC, lab, and full analysis. - im0xfa...

POC for CVE-2026-114713 - IRCv3 label-tag injection in UnrealIRCd escalating an unprivileged client message to server-to-server command authority on linked-server networks. Vulnerable 6.2.7 vs fixe...

CVE-2026-68982 — Apache Airflow CeleryExecutor unauthenticated callback RCE (poC + lab + analysis) - im0xfay/CVE-2026-68982

Contribute to bhtemp/mechanize-takehome-rce-poc development by creating an account on GitHub.

Full incident report + static teardown: HOME-role hijacking 'Roblox skins' adware launcher and fake 'Delete Apps' cleaner on an OPPO A79 5G (CPH2553). IOCs, YARA, ev...

Root RCE in Tenda HG21 via /boaform/formImportOMCIShell — uploaded file written to /tmp/omcishell and executed by /bin/sh as root. CVE-2026-37643. - umair9747/CVE-2026-37643-tenda-hg21-omcishell-rce

CVE-2026-126937 PoC: Zipline 4.6.4 POST /api/setup checks firstSetup, hashes with argon2 and resets the flag non-atomically - 20 barrier-synced requests with spoofed X-Forwarded-For created 15 SUPE...

多内核代理管理面板：Xray / sing-box / mihomo / Hysteria2 统一管理，内置套餐售卖、用户中心、工单与多主控高可用 - cuijianzhuang/Polaris

Detection rules (Sigma, Sentinel, YARA) managed as code with automated CI validation and testing - AditiNagpure/detection-as-code

Synthetic telemetry Sigma/YARA detection regression lab - Ildosoft/detection-engineering-lab

CVE-2026-128046 PoC: OpenMage LTS protected_extensions omits phar/php8/phps - an unauthenticated guest uploads a .phar through a product File custom option and executes it by fetching its predictab...

POC exploit for CVE-2026-117551 - frontend thumbnail upload to PHP RCE in the jDownloads Joomla extension. Vulnerable 4.1.7 vs fixed 4.1.8 control included. - fixedbyreboot/CVE-2026-117551-POC

PrestaShop security patch for stored XSS in Customer Threads BO (CVE 9.3/10, CWE-79) - ArteInfoRM/tecno_xss_hotfix

POC for CVE-2026-105857 - form-builder access collapse and raw MongoDB query injection in Payload CMS: non-admin reads all form submissions, boolean oracle extracts stored secrets, email config exp...

由DSH作为主力协助进行提权，DSH电脑端做ksu模块，利用CVE 43499 2026漏洞进行，iQOO7 Z7为ORIAIN OS4系统，制作中参考了其他创作者的代码，如有侵权请及时联系，完全免费 - ulyanovsk322-oss/iQOO-Z7-ROOT

Burp Suite Pro extension - Intruder-style injection scanner with 9 payload classes, 4 attack modes, confidence scoring, and 6 export formats - q3alique/burp-injection-scanner

POC for CVE-2026-62253 - complete authentication bypass in Homer (sipcapture homer-app): empty default JWT secret makes the middleware pass every request, exposing all admin API endpoints unauthent...

A python based vulnerability scanner project. Contribute to tamilarasanvijay-projectx/vulnerability-scanner-project development by creating an account on GitHub.