Contribute to kingwei123/zig0.16.0-shellcode development by creating an account on GitHub.

AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini) - yadavnikhil17102004/PassiveSight

A local, container-only educational demonstration of SSRF to a cloud instance metadata service (CWE-918 / OWASP A10:2021), through to credential replay, and the resolved-address control that stops ...

An explanation and PoC to exploit CVE-2026-20896 Authentication Bypass Vulnerability on Gitea. Being able to steal session tokens for valid users in the Gitea instance. - judgedbykira/CVE-2026-2089...

Passive web vulnerability scanner with OWASP Top 10 checks and generates HTML/PDF reports. Authorized security testing only. - HamzaSudozai/websec-scanner

DEF CON 34 badge. Contribute to Trinity-SYT-SECURITY/defcon-badge-0day development by creating an account on GitHub.

CVE-2026-9830 Proof of Concept. Contribute to opaxial/CVE-2026-9830 development by creating an account on GitHub.

OpenMed < 1.5.2 unauthenticated RCE via PII privacy-filter model loading and trust_remote_code=True - SaiTeja-Erukude/CVE-2026-47117-openmed-rce

Reproducible POC for combining static and runtime Java facts in a provenance-preserving graph. - eagle-head/aquila-graph-poc

Decompiles compiled YARA rules (.yarc) back to source — supports YARA 4.3–4.5.8 - rdx0120/YARAdec

Deliberately vulnerable demo target for the AI-remediation POC (see ai-remediation-demo) - junninho-orca/orca-poc-target

Migrates spaces and pages from Confluence Cloud into the TropaTT knowledge base. - Anton-Barinov/tropatt-module-confluence-migration

uproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata. - SaiTeja-Erukude/CVE-2026-9147-uproot-rce

Python StateMachine 3.0.0 < 3.2.0 RCE via unsafe SCXML <data expr> evaluation and Python eval() injection. - SaiTeja-Erukude/CVE-2026-47103-python-statemachine-rce

Hands-on XSS labs for learning, practicing, and understanding Cross-Site Scripting vulnerabilities. - NazaninNazari/XSS_Labs

修复 Windows 版 iCloud 密码扩展验证码弹窗失效：WindowsApps 权限提权状态下安装导致 secd 打包 COM 挂载失效（急救补丁 / 治本还原权限+重装）| Fix iCloud Passwords popup failure on Windows: broken packaged-COM mount caused by installing with elevat...

CVE-2026-17544: PHP bcmath OOB write → universal memory-only RCE & disable_functions/open_basedir bypass. Offset-free runtime resolver. Verified on PHP 8.4.x / 8.5.x. - r2qa/CVE-2026-17544

Next.js domain security scanner using Scrappey — headers, XSS posture, WHOIS, email auth, stack fingerprints, and crawls. - jordannpearce/websec-scout

This script is designed to be fast and efficient, leveraging Go's concurrency features to check multiple URLs simultaneously. - Kcoof/Xss

This is a full disclosure. The vulnerability was reported to the wallabag maintainers via GitHub Private Security Advisory on June 5, 2026. 3 FIX NO 1 MERGE NO CVE - FUNFACTOR1/WALLABAG-FULL-DISCLO...

Universal security vulnerability scanner for Roblox games - Auto-detect RemoteEvents and test 8+ exploit vectors - marvtem2210/roblox-exploit-scanner