CVE-2026-63030 / CVE-2026-60137 - WordPress pre-auth RCE scanner - bahartanir/wp2shell-scanner

Unauthenticated Remote Code Execution (RCE) vulnerability in the JCE (Joomla Content Editor) extension for Joomla - ChiefYoru/CVE-2026-48907_PoC

The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE. - ChiefYoru/CVE-2026-56290_PoC

A web vulnerable scanner. Contribute to administrator-01001/WebSec-Scanner development by creating an account on GitHub.

🔍 WebPyS is a powerful passive recon and vulnerability scanner built in Python. 🛡️ Performs SSL analysis, header auditing, WAF detection, and subdomain enumeration. 📦 Integrates Nmap and Nuclei for...

Contribute to mjh134/--POC development by creating an account on GitHub.

用于安全研究的漏洞利用代码. Contribute to lsq0237/poc development by creating an account on GitHub.

Web application penetration testing report on testphp.vulnweb.com (Acunetix's intentionally vulnerable test app) — covering SQL Injection, authentication bypass, reflected & stored ...

A lightweight, Python-based vulnerability scanner designed to detect common security flaws, open ports, and outdated software configurations in target systems. Developed as a mini project. - balaji...

Develop a Burp Suite extension (using Java with the Montoya API) that exports all logged HTTP requests and responses from the Proxy History, applying intelligent filtering, deduplication, and summa...

CVE-2026-33017 exploitation tool for Langflow <1.9.0. Features reverse shells, command execution, file operations, persistence, and automated testing. Validates critical RCE vulnerability im...

CVE-2025-64512: pdfminer.six pickle deserialization rce; pickle.gz + pdf generator w/ custom payloads - matesz44/CVE-2025-64512

Web application vulnerability scanner built for learning pentesting — Flask backend, live dashboard, multi-module scan engine - NamdevShivansh/SENTRIX

📦 Application web sécurisée de gestion de stock orientée Merchandising. Projet réalisé après 2 mois de formation. Focus sur la robustesse du code et la protection contre les failles XSS (sans frame...

Command-line web vulnerability scanner that runs the OWASP Top 10 (2021) against a target URL. Colorful terminal output and a styled HTML report. - dx7er/plankton

AI-enhanced website vulnerability scanner with Gemini-powered security insights. - atikshded/WatchTower-AI

Spring Cloud Gateway 整合 Spring Security，基于响应式实现网关与鉴权功能的融合 - zk1991-github/spring-cloud-gateway-security

Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026. - DavidCarliez/CVE-2026-49176_LPE_POC

ADB 2026-0073 Proof Of Concept RCE. Contribute to lilsheepyy/ADB-2026-0073-POC development by creating an account on GitHub.

Read-only WordPress plugin that scans for artifacts of the wp2shell exploit chain (CVE-2026-63030 / CVE-2026-60137) - eyesecurity/wp2shell-compromise-scanner-plugin

Network vulnerability scanner: host/port discovery (nmap), CVE lookup via NVD API, per-device risk scoring, CLI and Streamlit web interface - hfs-ch/network-vulnerability-scanner