Python StateMachine 3.0.0 < 3.2.0 RCE via unsafe SCXML <data expr> evaluation and Python eval() injection. - SaiTeja-Erukude/CVE-2026-47103-python-statemachine-rce

Hands-on XSS labs for learning, practicing, and understanding Cross-Site Scripting vulnerabilities. - NazaninNazari/XSS_Labs

修复 Windows 版 iCloud 密码扩展验证码弹窗失效：WindowsApps 权限提权状态下安装导致 secd 打包 COM 挂载失效（急救补丁 / 治本还原权限+重装）| Fix iCloud Passwords popup failure on Windows: broken packaged-COM mount caused by installing with elevat...

CVE-2026-17544: PHP bcmath OOB write → universal memory-only RCE & disable_functions/open_basedir bypass. Offset-free runtime resolver. Verified on PHP 8.4.x / 8.5.x. - r2qa/CVE-2026-17544

Next.js domain security scanner using Scrappey — headers, XSS posture, WHOIS, email auth, stack fingerprints, and crawls. - jordannpearce/websec-scout

This script is designed to be fast and efficient, leveraging Go's concurrency features to check multiple URLs simultaneously. - Kcoof/Xss

This is a full disclosure. The vulnerability was reported to the wallabag maintainers via GitHub Private Security Advisory on June 5, 2026. 3 FIX NO 1 MERGE NO CVE - FUNFACTOR1/WALLABAG-FULL-DISCLO...

Universal security vulnerability scanner for Roblox games - Auto-detect RemoteEvents and test 8+ exploit vectors - marvtem2210/roblox-exploit-scanner

POC of CVE-2026-51031 for arbitrary local file read - daemoncibsec/flar3ad

Malware analysis investigation using sandbox evidence to examine file indicators, behavioral activity, YARA detections, and command-and-control communications. - JohnOkoji-source/malware-sandbox-an...

PHP反序列化Payload构造工具. Contribute to Zekon-Xu/PHP-Deserialization-Payload-Generator development by creating an account on GitHub.

PoC for CVE-2026-73847 - emlog AI Assistant CSRF to SQL execution to admin takeover (CVSS 6.8) - squeeze440/CVE-2026-73847-emlog-PoC

PoC for CVE-2026-73519 - WolfStack hardcoded cluster secret leads to unauthenticated RCE (CVSS 9.8) - squeeze440/CVE-2026-73519-WolfStack-PoC

`awvs_json_word.py` 是一个将 **Acunetix（AWVS）/ Invicti** 扫描器导出的 JSON 结果文件，自动生成为**中文 Word 安全漏洞报告**的一体化工具。 脚本内置了数据解析、格式转换、中文化翻译、统计图表生成和报告排版等全部功能，只需一条命令即可完成从原始扫描数据到正式报告的全过程，无需任何人工干预。 - kabuqin/awvs_json_...

ExploiterX is a lightweight, customizable vulnerability scanner designed to detect security weaknesses in web applications. This tool crawls target websites, identifies potential links and forms, a...

Rust bindings to LLVM. (Mirror of https://gitlab.com/taricorp/llvm-sys.rs/) - tari/llvm-sys.rs

Vulnerability Assessment Report — DOM-Based XSS on OWASP Juice Shop. Manual black-box testing, PoC, and professional remediation writeup for Project 03: Web App Security. - profdniel/-VULNERABILI...

External attack-surface assessment identifying a Stored XSS condition through reconnaissance, asset enumeration, and web application testing. - unknownAgent10/infomaniak-stored-xss-assessment

**MrCipher 是一款一体化的综合漏洞扫描与资产测绘工具**，把"主机发现 → 端口扫描 → 协议识别 → 子域枚举 → Web 指纹探测 → 漏洞检测 → 后渗透验证"整合成一条流水线，面向红队 / 安服 / 授权自检场景，提供 **命令行、交互式控制台、Web 界面（-ui）** 三种使用方式。 它的核心特点是：**自带一套 Go 原生重新实现...

Forgex 是一款面向 Windows 平台的集成式渗透测试工具箱。它将信息收集、漏洞扫描、爆破利用、逆向分析、移动端 Hook、代理隧道等数十款主流安全工具聚合在一个统一的可视化界面中，单击即可启动，免去了手工配置环境、切换多套软件的繁琐 - AWY-Cipher/Forgex

2026 最新 iOS Coruna 漏洞演练与 DarkSword 0day 前沿动态监测。. Contribute to coruna19980101/darksword development by creating an account on GitHub.