DEF CON 34 badge. Contribute to Trinity-SYT-SECURITY/defcon-badge-0day development by creating an account on GitHub.

CVE-2026-9830 Proof of Concept. Contribute to opaxial/CVE-2026-9830 development by creating an account on GitHub.

OpenMed < 1.5.2 unauthenticated RCE via PII privacy-filter model loading and trust_remote_code=True - SaiTeja-Erukude/CVE-2026-47117-openmed-rce

Reproducible POC for combining static and runtime Java facts in a provenance-preserving graph. - eagle-head/aquila-graph-poc

Decompiles compiled YARA rules (.yarc) back to source — supports YARA 4.3–4.5.8 - rdx0120/YARAdec

Deliberately vulnerable demo target for the AI-remediation POC (see ai-remediation-demo) - junninho-orca/orca-poc-target

Migrates spaces and pages from Confluence Cloud into the TropaTT knowledge base. - Anton-Barinov/tropatt-module-confluence-migration

uproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata. - SaiTeja-Erukude/CVE-2026-9147-uproot-rce

Python StateMachine 3.0.0 < 3.2.0 RCE via unsafe SCXML <data expr> evaluation and Python eval() injection. - SaiTeja-Erukude/CVE-2026-47103-python-statemachine-rce

Hands-on XSS labs for learning, practicing, and understanding Cross-Site Scripting vulnerabilities. - NazaninNazari/XSS_Labs

修复 Windows 版 iCloud 密码扩展验证码弹窗失效：WindowsApps 权限提权状态下安装导致 secd 打包 COM 挂载失效（急救补丁 / 治本还原权限+重装）| Fix iCloud Passwords popup failure on Windows: broken packaged-COM mount caused by installing with elevat...

CVE-2026-17544: PHP bcmath OOB write → universal memory-only RCE & disable_functions/open_basedir bypass. Offset-free runtime resolver. Verified on PHP 8.4.x / 8.5.x. - r2qa/CVE-2026-17544

Next.js domain security scanner using Scrappey — headers, XSS posture, WHOIS, email auth, stack fingerprints, and crawls. - jordannpearce/websec-scout

This script is designed to be fast and efficient, leveraging Go's concurrency features to check multiple URLs simultaneously. - Kcoof/Xss

This is a full disclosure. The vulnerability was reported to the wallabag maintainers via GitHub Private Security Advisory on June 5, 2026. 3 FIX NO 1 MERGE NO CVE - FUNFACTOR1/WALLABAG-FULL-DISCLO...

Universal security vulnerability scanner for Roblox games - Auto-detect RemoteEvents and test 8+ exploit vectors - marvtem2210/roblox-exploit-scanner

POC of CVE-2026-51031 for arbitrary local file read - daemoncibsec/flar3ad

Malware analysis investigation using sandbox evidence to examine file indicators, behavioral activity, YARA detections, and command-and-control communications. - JohnOkoji-source/malware-sandbox-an...

PHP反序列化Payload构造工具. Contribute to Zekon-Xu/PHP-Deserialization-Payload-Generator development by creating an account on GitHub.

PoC for CVE-2026-73847 - emlog AI Assistant CSRF to SQL execution to admin takeover (CVSS 6.8) - squeeze440/CVE-2026-73847-emlog-PoC

PoC for CVE-2026-73519 - WolfStack hardcoded cluster secret leads to unauthenticated RCE (CVSS 9.8) - squeeze440/CVE-2026-73519-WolfStack-PoC