Analyze Alipay SecurityGuard SDK architecture, privacy, and attack surface to expose unprotected APIs and VM bypass risks - emapleural312/alipay-securityguard-analysis

PoC for CVE-2026-6433: WordPress FlipperCode Custom CSS, JS & PHP (≤2.0.7) — unauthenticated SQLi to RCE. Python 3 stdlib; single target or bulk multi-threaded scanning. Authorized testing ...

Shell script to detect TanStack npm supply chain attack indicators (CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx) - fabriziosalmi/tanstack-compromise-checker

Zero-dependency CLI scanner for npm/PyPI supply chain compromises. Detects compromised packages in lockfiles and system-level IOCs from attacks like Mini Shai-Hulud (CVE-2026-45321). - digi4care/sh...

Renders OpenGraph preview cards for plain links in Flarum 2.0 posts. SSRF-hardened, queue-backed, with per-card dismiss controls and self-link short-circuit. Schema-compatible with legacy kilowhat/...

Contribute to EmilijaMicovic/BurpSuite-Extensions development by creating an account on GitHub.

Auralis 音澜 - A high-fidelity local music player for Android built with Jetpack Compose. Features true bit-depth/sample-rate detection (bypassing Android limitations), DSD/DXD tagging, and an ultra-...

Full-stack web platform: NestJS backend + React 19 frontend. JWT auth with AES-256-GCM cookies, CSRF protection, CMS modules, RBAC, i18n (en/ko), PostgreSQL + Redis, Swagger docs, Docker Compose. -...

A configurable messy CSV data generator for testing data-cleaning pipelines, ETL processes, and input sanitisation. Supports three mess levels, up to 20 field types, and optional SQL/XSS injection ...

红蓝对抗战术仪表盘 — 全透明悬浮窗硬件监控 + AI 驱动攻击链生成. Contribute to hr666666562/GhostMonitor development by creating an account on GitHub.

Contribute to p3ix/ssrf-scan development by creating an account on GitHub.

Design and Implementation of a Defense-in-Depth Security Architecture for Kubernetes Environments - huynhtrungcsc/C2NE.03

Technical breakdown of CVE-2026-34473, an unauthenticated denial of service affecting 17+ ZTE router models. - minanagehsalalma/cve-2026-34473-unauthenticated-dos-zte-routers

晨光心语 —— AstrBot 人格化日程插件 每日 AI 风格化日程生成，人格隔离，一键注入。 让每一个清晨都有独特的仪式感，让 AI 记住你的每一个身份。 - NekoTumble/astrbot_plugin_morning_muse

PwnTheBugs is an open-source repository focused on documenting, analyzing, and testing web application security vulnerabilities. It offers a comprehensive collection of practical examples of common...

个人知识库 RAG 问答系统 - Obsidian/PDF/网页多源接入，混合检索，引用溯源. Contribute to wjyxiaojiu-del/obsidian-rag development by creating an account on GitHub.

面向院感科的信息化工具，通过时序对齐与滞后回溯建模（ARIMA/逻辑回归）预测ICU呼吸机相关性肺炎发生风险，提前3-5天输出高/中/低预警级别，支持多科室横向归因与REST API实时调用。 - nexorin9/vap-risk-predictor

Thesis project: Server Side Request Forgery Laboratory - Simone-Sangiovanni/thesis-ssrf-lab

Personal Claude Code plugin marketplace — reusable primitives for collaborating with Claude on rich artifacts and multi-turn iteration loops. Currently ships: annotated-feedback (HTML artifacts wit...

CVE-2026-44578. Contribute to 0xBlackash/CVE-2026-44578 development by creating an account on GitHub.

Snackify is an enterprise-grade PHP web application for vending and e-commerce automation. Built with a secure three-tier architecture, PDO Singleton, and RBAC, it features CSRF protection, session...