ESP32-based iot vulnerability scanner. Contribute to Rajveersoni9/iot-sentinel development by creating an account on GitHub.

This repository contains a proof-of-concept (PoC) exploit for CVE-2026-38751, affecting OpenSTAManager ≤ 2.10. The vulnerability allows an authenticated attacker to upload a malicious module via t...

Contribute to K3ysTr0K3R/CVE-2025-57819 development by creating an account on GitHub.

BLOODFANG is my second cutting-edge red team offensive toolkit, crafted for rapid reconnaissance, exploitation, and post-exploitation operations. Packed with advanced modules like password spraying...

Offline desktop studio for writing, testing and managing YARA rules — Tauri 2 + YARA-X, 100% local - platinum2high/yara-studio

A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk scoring. - Rhacknarok/hacksguard

CVE-2026-13768: Privileged iothubowner IoT Hub credential — fleet enumeration, device RCE, home-network pivot — Gardyn (ICSA-26-183-03) - MichaelAdamGroberman/CVE-2026-13768

Deliberately-vulnerable PHP web app: 5 attacks (SQLi, stored/reflected XSS, brute force, directory traversal) each with a hardened fix. Educational/portfolio lab. - sarjanpatel22/web-app-security-lab

A Python based vulnerability scanner that automatically identifies security weaknesses, misconfigurations, and potential attack vectors in systems, networks, and web applications. - AZA738/Vulnerab...

Desktop malware scanner built with Python that combines VirusTotal API, YARA rule scanning, encrypted API key storage, SHA-256 hashing, caching, and exportable scan reports. - VijayShanbhag/VT-Desk...

CVE-2026-54477: Admin Panel Missing Security Headers (clickjacking/XSS) - Gardyn (ICSA-26-183-03) - MichaelAdamGroberman/CVE-2026-54477

SCPN Vulnerability Scanner is a comprehensive scanning tool designed to detect vulnerabilities in websites, applications, and router devices. The tool scans and analyzes targets using various tools...

Exploiting Parsec for Windows to gain SYSTEM privileges - tomadimitrie/CVE-2026-54424

Static malware triage tool. Contribute to SatchelKill/malscan development by creating an account on GitHub.

Gorse < 0.5.10 contains an authentication bypass caused by empty admin_api_key in /api/dump and /api/restore endpoints, letting unauthenticated remote attackers access and modify protected d...

Static malware triage tool. Contribute to mason-rosenberger/malscan development by creating an account on GitHub.

Redis 7.0.0 核心模块重构与漏洞修复交付（重构 sds/adlist/intset/listpack，相似度≤20%；修复 CVE-2023-25155/28856、CVE-2024-31449、CVE-2022-36021、CVE-2022-31144 等漏洞） - qwqqaqqwq00/opensource_defect_repare_cc

Redis 7.0.0 核心模块重构与漏洞修复交付（重构 sds/adlist/intset/listpack，相似度≤20%；修复 CVE-2023-25155/28856、CVE-2024-31449、CVE-2022-36021、CVE-2022-31144 等漏洞） - qwqqaqqwq00/opensource_defect_repair_cc

Proof-of-concept distributed ad click event processing system using Spring Boot, Redis, LocalStack, and AWS-style architecture. - Backend-Lab-SR/ad-event-click-processor

Machine learning-based WAF for detecting SQLi, XSS, SSTI, LFI, RCE, NoSQL & CRLF attacks - MennaElzayat/iwaf-web-attack-detection

Page Builder CK for Joomla - Unauthenticated SSRF / Remote File Write leading to PHP execution Exploiter - sagsooz/Page-Builder-CK-Exploit