Pre-auth RCE scanner for Langflow < 1.8.0 — Route Injection + Vertex Injection → Code Execution (CVSS 9.8) - shinthink/CVE-2026-27966

AI-powered network scanner & vulnerability scanner — nmap + Python + Flask + React. CLI, Web UI, API & PDF reports for pentesting & recon. - frangelbarrera/Network-Scanner

PoC for a Critical stack-based buffer overflow in GNU libextractor ≤ 1.14. A malicious .doc file triggers an unbounded VLA allocation causing unconditional DoS. In multi-threaded environments, it b...

A full-stack, distributed online judge platform. Features a secure, multi-language Remote Code Execution (RCE) sandbox using Docker, asynchronous task queues with Redis/BullMQ, and a responsive Nex...

Proof of Concept (PoC) for CVE-2026-49975 – HTTP/2 server memory exhaustion attack leveraging HPACK amplification and connection retention (HTTP/2 Slowloris). - Manisso/http2-bomb

A vulnerable Boot-to-Root CTF lab machine simulating a hospital environment. Features a realistic 17-step attack chain including SQL Injection, XSS, Session Hijacking, SSH access, password cracking...

Pre-auth path traversal to arbitrary file delete in Avada (Fusion) Builder <= 3.15.3 leading to RCE (CVSS 9.1) - shinthink/CVE-2026-8713

A Software-in-the-Loop (SITL) simulation framework for autonomous satellite self-healing. Features local-first Flight Software (FSW) with ML-based anomaly detection to autonomously recover from adv...

A self-hosted AI image generation platform with multi-provider failover, user management, and admin panel. Deploy with Docker. - salnart/imagens

Pre-auth Local File Inclusion in WP User Manager <= 2.9.17 via path traversal in tab parameter (CVSS 7.5) - shinthink/CVE-2026-9290

Post-incident remediation of SQL injection, reflected XSS, weak hashing, and unauthenticated encryption in a PHP/MySQL EHR case study (SECR4483 Secure Programming). - danialnur/SECR4483-medichain-r...

YARA 4.5.7 with in-tree holloman fingerprinting module - wessorh/yara-c-holloman3

Generic attack-simulation toolkit that validates FortiDeceptor and other deception/honeypot solutions by triggering decoys and correlating the alerts they raise. Purple-team PoC. - fatihpurtas/fort...

OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attackers to gain admin access by supplying an...

The new vuln of Magento has a Arbitary file upload/Remote code execution conditions. - thecodeb0ss/New-Magento-PoC

Physically-grounded anomaly detection for massively-multimodal CPS normal data (MIIM). Joint VaDE + 3 components (C1 generation, C2 basin, C3 ensemble). Paper + PoC. - ApartsinProjects/LatAD

Burp Suite Full Feature Extension with AI SQL Injection Scanner by sdev. - Sdeveandteam/burpsuite-ai-scanner

Apache Shiro fork with CVE backports for Nexus. Contribute to AlaudaDevops/shiro development by creating an account on GitHub.

Enterprise EDR — multi-platform agents (Win/Linux/macOS) with YARA/Sigma/behavioral/ML detection, automated response, mTLS, React SOC portal. - im-tyler/forerunner

Contribute to dtaoOfficial/nhei-yara-rules development by creating an account on GitHub.

Local LAN-multiplayer + solo-with-AI table for Backdoors & Breaches (incident-response card game). Node + WebSockets, hidden GM objectives, Ollama narrator. - xD4O/bnb-table