CVE-2026-54433 Roundcube plain-text email stored XSS PoC - aramosf/CVE-2026-54433

Browser capability for DeepSeek Harness: headed Edge/Playwright provider, SSRF-safe navigation, a11y-ref clicking, permission gate with auto-remember, gated evaluate - xylt369/dsh-browser

夜航 · works —— 双非计算机学生的网安作品仓公开镜像（Bash → Linux → 网络 → Web → 漏洞复现 → writeup） - pionxe/works

A cybersecurity lab demonstration illustrating how an insecure file upload function in a web application can be exploited using **Burp Suite to achieve Remote Code Execution (RCE) and exfiltrate se...

Contribute to SANR01/CVE-2021-41773-Exploit-Lab development by creating an account on GitHub.

A Python-based network vulnerability scanner that discovers active devices, scans TCP ports, detects services and banners, performs rule-based risk analysis, and generates security reports. - aloks...

A lightweight Node.js vulnerability and security configuration scanner. - Pexel-sibi/JARVIS-vulnerability-scanner

Intentionally vulnerable single-page dashboard demonstrating es-chromium DOM-XSS taint tracking - 21 flows across 8 sources and 18 sinks, each reachable from one URL. Demo target only. - EyalSec/vu...

es-chromium: a Chromium build that tracks attacker-controlled data through V8 and Blink and reports DOM-XSS as a flow, not a guess. The browser agent behind EyalSec. - EyalSec/es-chromium

CVE-2026-8452 PreAuth RCE. Contribute to watchtowrlabs/watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452 development by creating an account on GitHub.

Reglas YARA para detección de malware, desarrolladas a partir de análisis de muestras reales. - raulsineiro/malware-yara-rules

Proof of Concept (PoC) for CVE-2026-64638, a reflected XSS in WordPress Core < 7.0.3. - zahidec0de/CVE-2026-12345-poc

POC tool for ResetNightmare (CVE-2026-27912). Contribute to Semperis-Community/ResetNightmare development by creating an account on GitHub.

Burp Suite extension: loopback MCP/HTTP API so agents can drive live Burp (scope, history, send, scanner, collaborator). - SquidSec/SquidSec_BurpAIBridge

Burp Suite Community Edition extension providing a powerful HTTP traffic search feature. Search captured requests and responses using keywords or regex, with filters, match highlighting, snippets, ...

Malicious PDF files recently considered one of the most dangerous threats to the system security. The flexible code-bearing vector of the PDF format enables to attacker to carry out malicious code ...

PoC funcional de CVE-2026-52715 (GeoLeak): SQLi no autenticada en GEO my WordPress <= 4.5.5 via swlatlng/nelatlng. Laboratorio Docker + exploit time-based/boolean-based + exfiltracion sin co...

Conversor de câmbio desenvolvido para fins de estudo em AppSec e Arquitetura Front-end. Implementa mitigação de XSS, CSP restrita, Rate Limiting no cliente (Debounce) e segregação estrita de assets...

Contribute to Giangdurian/zimbra-zmswatchd-rce-lab development by creating an account on GitHub.

Scanner de Vulnerabilidades Multi-Tipo em Rust (15 tipos, WAF Bypass, API REST, Race Conditions e mais) - 5n4vc4smh8-pixel/vuln-scanner

Web Vulnerability Scanner. Contribute to adelkamell/Web-Scanner development by creating an account on GitHub.