Security Advisory: Infinite Loop DoS in facil.io MIME Parser (Partial Boundary) - theopaid/CVE-2026-66730-Infinite-Loop-DoS-in-facil.io-MIME-Parser

⚠️ Intentionally vulnerable PHP + MySQL web app for practicing OWASP Top 10 (SQLi, XSS, CSRF, LFI, Command Injection, File Upload, IDOR) — for local/educational use only, DVWA-style with Low/Medium...

Safe, replayable web acquisition for review pipelines: SSRF-pinned crawling, provenance-bearing snapshots, and deterministic replay. - kontourai/forage

Security Advisory: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash - theopaid/CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

Threat Intelligence Investigation. Contribute to ChPratik/CVE-2026-9830 development by creating an account on GitHub.

Pre-clone repo security scanner - detects obfuscated payloads in SVGs, Unicode tricks, C2 callbacks, supply-chain attacks, and CI/CD abuse. - srinathsankara/reporeaver

Static and dynamic analysis of real malware samples using Any.Run, comprehensive malware reports, and YARA detection rules. - lewandovskii9/malware-analysis

a collection of my very personal nuclei templates. Contribute to k11h-de/nuclei-templates-custom development by creating an account on GitHub.

Unprivileged user to root via CUPS logic flaw — macOS Sonoma, Sequoia, and Tahoe. Patched in macOS 26.6 / 15.7.8 / 14.8.8. - mac-123456789-lab/CVE-2026-39875-macOS-CUPS-LPE

A poc for a vulnerability in ZTE File Manager (zte.com.cn.filer) which allows to read arbitrary files from other apps with the privileges of this file manager - Skorpion96/CVE-2026-40000

Repository of Yara Rules & Config Extractors. Contribute to apophis133/Apophis-Detection development by creating an account on GitHub.

17-stage deterministic malware analysis pipeline. Hash → entropy → signature → sandbox → triage. No ML hype. Just math, YARA, and syscalls. - ARES-SYS/malware-pipeline

Contribute to saadhassan77/CVE-2025-64512---pdfminer.six-Remote-Code-Execution-RCE- development by creating an account on GitHub.

Real-time log analysis project featuring a deliberately vulnerable Flask app, custom Python detection rules mapped to MITRE ATT&CK, Telegram alerting, and a hardened remediated version for ...

⚠️ Intentionally vulnerable PHP + MySQL web app for practicing OWASP Top 10 (SQLi, XSS, CSRF, LFI, Command Injection, File Upload, IDOR) — for local/educational use only, DVWA-style with Low/Medium...

Cybe - A modern, cross-platform mobile security & privacy suite for Android & iOS. Features Password Manager, Wi-Fi Scanner, File Encryption Vault, Phishing URL Checker, Device Vuln...

Reproducer for CVE-2026-48204: Apache Camel camel-mongodb-gridfs gridfs.* header injection overriding the GridFS operation (enumerate/read/delete files) from an unauthenticated HTTP request (fixed ...

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. - ChPratik/CVE-2026-50522

Web-based Vulnerability Scanner project built for security assessment and vulnerability analysis. - divu638/Web-Vulnerability-Scanner

fastjson2 (≤ 2.0.61) autoType RCE 检测防御体系 — 五层 × 六产品纵深防御，覆盖完整攻击链，VM 端到端验证通过 - Detect-DefenseLab/fastjson2-2.0.61-rce-detection

Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators (CVE-2026-63030 / CVE-2026-60137) across all hosted sites — per-user email reports, core file diff ...