Scanner: CVE-2026-1731 BeyondTrust Remote Support Pre-auth RCE — Python checker for actively exploited vulnerability (CISA KEV) - ridhinva/beyondtrust-rce-scanner

PoC: h2 duplicate Host header request smuggling primitive (CVE pending) - SunandM/poc-h2-duplicate-host

PoC for CVE-2026-71554 — h2 duplicate Host header request smuggling primitive (fixed in 4.4.1) - SunandM/poc-h2-CVE-2026-71554

Wormable exploit for CVE-2026-57858. Contribute to zylideum/CVE-2026-57858 development by creating an account on GitHub.

A technical demonstration of exploiting Stored Cross-Site Scripting (XSS) to exfiltrate administrative tokens, perform session hijacking, and expose plaintext credentials in a mock web application....

Scanner: Web3/DeFi smart contract vulnerability scanner — reentrancy, oracle manipulation, flash loans, governance attacks in Python - ridhinva/web3-defi-scanner

A simple PoC on the Remote Code Execution (RCE) Vulnerability of CraftCMS designated as CVE-2025-32432 written in Go - EzraMansor/CVE-2025-32432-PoC

Scanner: OWASP API Top 10 2023 + GraphQL security scanner — BOLA, BFLA, SSRF, introspection leaks, depth DoS in Python - ridhinva/api-security-scanner

Template Nuclei para detecção não-intrusiva do XSS2Shell, um parser differential pré-autenticado no WordPress Core que permite injeção de elementos DOM na página de login, servindo de base para uma...

extension Tools & Packers – A professional-grade Windows toolkit for advanced payload generation, obfuscation, and analysis for security research. - carped-955514-terry/PayloadGenerator-Adv...

Toolkit: Modular exploit development — protocol fuzzer, payload generator, ROP builder, shellcode encoder in Python - ridhinva/Exploit-Dev-Toolkit

A fast, open-source, template-driven vulnerability scanner for bug bounty - tuangatech/hacker-five

This exploit is based on CVE-2017-9757 and was built upon the original exploit by 0x09AL. - joaoaugustom/IPFire_2.19_RCE_Authenticated

深度渗透测试 AI Skill | Deep Penetration Testing Methodology — 黑盒渗透 + 白盒审计 + Multi-Agent 协同，以顶尖漏洞挖掘专家标准执行安全测试 - liuzhiyong/pentest-deep-dive

Contribute to Saku0512/CVE-2026-71557-poc development by creating an account on GitHub.

CVE-2026-64638: WordPress Pre-auth XSS → RCE (XSS2Shell) PoC - imbas007/CVE-2026-64638-POC

Zapscape (CVE-2026-64561) KVM/x86 shadow MMU UAF guest-to-host escape PoC mirror — V4bel/@v4bel, MIT; for authorized security testing - HackSpeak/CVE-2026-64561

Contribute to soluzka/antivirus-yara-rules-c development by creating an account on GitHub.

Taint is a PHP extension, used for detecting XSS codes - laruence/taint

PoC for CVE-2026-18953 — arbitrary file write (CWE-22) in awslabs.aws-transform-mcp-server's get_resource tool via the savePath parameter - ronamosa/CVE-2026-18953