OpenMed < 1.5.2 unauthenticated RCE via PII privacy-filter model loading and trust_remote_code=True - SaiTeja-Erukude/CVE-2026-47117-openmed-rce

Reproducible POC for combining static and runtime Java facts in a provenance-preserving graph. - eagle-head/aquila-graph-poc

Decompiles compiled YARA rules (.yarc) back to source — supports YARA 4.3–4.5.8 - rdx0120/YARAdec

Deliberately vulnerable demo target for the AI-remediation POC (see ai-remediation-demo) - junninho-orca/orca-poc-target

Migrates spaces and pages from Confluence Cloud into the TropaTT knowledge base. - Anton-Barinov/tropatt-module-confluence-migration

uproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata. - SaiTeja-Erukude/CVE-2026-9147-uproot-rce

Python StateMachine 3.0.0 < 3.2.0 RCE via unsafe SCXML <data expr> evaluation and Python eval() injection. - SaiTeja-Erukude/CVE-2026-47103-python-statemachine-rce

Hands-on XSS labs for learning, practicing, and understanding Cross-Site Scripting vulnerabilities. - NazaninNazari/XSS_Labs

修复 Windows 版 iCloud 密码扩展验证码弹窗失效：WindowsApps 权限提权状态下安装导致 secd 打包 COM 挂载失效（急救补丁 / 治本还原权限+重装）| Fix iCloud Passwords popup failure on Windows: broken packaged-COM mount caused by installing with elevat...

CVE-2026-17544: PHP bcmath OOB write → universal memory-only RCE & disable_functions/open_basedir bypass. Offset-free runtime resolver. Verified on PHP 8.4.x / 8.5.x. - r2qa/CVE-2026-17544

Next.js domain security scanner using Scrappey — headers, XSS posture, WHOIS, email auth, stack fingerprints, and crawls. - jordannpearce/websec-scout

This script is designed to be fast and efficient, leveraging Go's concurrency features to check multiple URLs simultaneously. - Kcoof/Xss

This is a full disclosure. The vulnerability was reported to the wallabag maintainers via GitHub Private Security Advisory on June 5, 2026. 3 FIX NO 1 MERGE NO CVE - FUNFACTOR1/WALLABAG-FULL-DISCLO...

Universal security vulnerability scanner for Roblox games - Auto-detect RemoteEvents and test 8+ exploit vectors - marvtem2210/roblox-exploit-scanner

POC of CVE-2026-51031 for arbitrary local file read - daemoncibsec/flar3ad

Malware analysis investigation using sandbox evidence to examine file indicators, behavioral activity, YARA detections, and command-and-control communications. - JohnOkoji-source/malware-sandbox-an...

PHP反序列化Payload构造工具. Contribute to Zekon-Xu/PHP-Deserialization-Payload-Generator development by creating an account on GitHub.

PoC for CVE-2026-73847 - emlog AI Assistant CSRF to SQL execution to admin takeover (CVSS 6.8) - squeeze440/CVE-2026-73847-emlog-PoC

PoC for CVE-2026-73519 - WolfStack hardcoded cluster secret leads to unauthenticated RCE (CVSS 9.8) - squeeze440/CVE-2026-73519-WolfStack-PoC

`awvs_json_word.py` 是一个将 **Acunetix（AWVS）/ Invicti** 扫描器导出的 JSON 结果文件，自动生成为**中文 Word 安全漏洞报告**的一体化工具。 脚本内置了数据解析、格式转换、中文化翻译、统计图表生成和报告排版等全部功能，只需一条命令即可完成从原始扫描数据到正式报告的全过程，无需任何人工干预。 - kabuqin/awvs_json_...

ExploiterX is a lightweight, customizable vulnerability scanner designed to detect security weaknesses in web applications. This tool crawls target websites, identifies potential links and forms, a...