iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution. - ChiefYoru/CVE-2026-48939_PoC

Blackbox, non-intrusive detector for wp2shell (WordPress core pre-auth RCE, CVE-2026-63030 / CVE-2026-60137). Detection only. - own2pwn-fr/wp2shell-detect

Automate security testing tasks with this curated collection of Burp Suite scripts, extension samples, and workflow helpers. - mohiteprathamesh369-a11y/mohiteprathamesh369-a11y.github.io

Automate Burp Suite tasks with this collection of extension scripts and security testing helpers for efficient web application assessments. - mohiteprathamesh369-a11y/burp-suite-executor-scripts

PoC for CVE-2026-46420, command injection in shivammathur/setup-php via repository-controlled PHP version resolution. - Jvr2022/CVE-2026-46420

The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE. - ChiefYoru/CVE-2026-56291_PoC

Contribute to adios255/awareness-edr-tamper-bypass development by creating an account on GitHub.

Lightweight MCP proxy that consolidates multiple MCP servers into single meta-tools — bypass per-client tool limits without losing functionality - sevket/mcp-proxy

Distributed dependency vulnerability scanner with Spring Boot, RabbitMQ, OSV API, scan history, Redis caching, and resilient asynchronous processing. - gustavogeraldelli/dependency-vulnerability-sc...

Contribute to coolnn/dom-based-xss-lab development by creating an account on GitHub.

A Python-based web vulnerability scanner designed to detect security issues such as missing HTTP headers, insecure configurations, and basic web vulnerabilities. - elidiosozinho/vulnerability-scanner

Newly published and newly exploited security vulnerabilities three times a day, translates each one from dense technical language into plain English, and surfaces the remediation that the source it...

Signed device profiles, mobile exploit payloads, and KernelSU artifacts for Root My Galaxy - BuSung-dev/Root-My-Galaxy-Payloads

Professional Web Application Penetration Test Report for OWASP Juice Shop including reconnaissance, enumeration, vulnerability assessment, exploitation, and remediation recommendations. - Vicks298/...

An automated reconnaissance and vulnerability assessment framework built in Python. It combines host discovery, service enumeration, technology fingerprinting, CVE intelligence, and Nuclei-based vu...

A hybrid static malware detection system that combines SHA-256 hash matching, YARA rule-based detection, and a Random Forest machine learning model to identify malicious Windows PE files. Built wit...

基于python开发的漏洞扫描小工具. Contribute to gshhwht/python-security-scanner development by creating an account on GitHub.

Multi-step volunteer registration form for Soup Kitchen Volunteers — React SPA with validation, accessibility, and XSS-safe input handling. - ashish-bisht-iot/soup-kitchen-volunteer-form