POC for CVE-2026-90436 - unauthenticated remote class instantiation in Apache Axis 1.x via SOAP fault exceptionName, bypassing configured auth handlers. EOL software, no fix exists. - fixedbyreboot...

POC exploit for CVE-2026-73665 - unauthenticated RCE in FreePBX UCP via Socket.IO namespace auth bypass feeding CRLF injection into the Asterisk Manager Interface. Vulnerable 17.0.7 lab vs patched ...

POC exploit for CVE-2026-68524 - preauth RCE in Apache OFBiz via request body shadowing the decorator location and file URI screen loading. Verified on 24.09.07, control on 24.09.08. - fixedbyreboo...

This is a Red Team & Penetration Test framework and toolkit for MacOS. - Rikuxx0/RedTeam_Toolkit_for_Mac

Python web vulnerability scanner that checks security headers, SSL expiry, SQLi error reflection, and web ports, and saves the report to web_report.json. - lucas-The-Coder/WebHawk

Vulnerability Scanner for Identifying System Weaknesses – Owoeye Yusuf Olawale - goodluckworji1-boop/vulnerability-scanner

Web 漏洞原理与实操手册（新手版）：DVWA/Pikachu/Juice Shop 本地靶场，11 类漏洞的原理·最小证明·判读·修复 - D4C-wof/web-vuln-handbook

FiberHome SR1041D RP0100 (China Unicom) pre-auth info leak, root RCE and telnet interface PoCs - Steve49047/fiberhome-sr1041d-vuln

CVE-2026-125757 Exploit — mailcow domain-wide footer SSTI via rspamd's jinja/lupa engine, enabling cross-tenant RCE in the shared rspamd container. - Faceless0x7/CVE-2026-125757

Repositório dedicado a POC com SpringBoot. Contribute to SSKings/Projetos-JAVA-Spring-Back-End- development by creating an account on GitHub.

Python-based advanced web vulnerability scanner featuring 18 detection modules, Playwright browser automation, and CVSS/CWE-based reporting. - shweta-kawle/VULGCH-Advanced-Web-Vulnerability-Scanner

Contribute to Jaarden/DWARF3-RCE development by creating an account on GitHub.

Signal Console, Community Edition: the web console for Signal, the read-only Windows DFIR survey by Intrusion Academy. Import every host's Signal run and see where to look first and what ea...

镜像 SBOM 漏洞可达性图谱与修复优先台：镜像 SBOM 漏洞可达性图谱与修复优先台：从 SBOM 出发做调用关系可达性分析，剔除不可达 CVE 噪音，并让每一次豁免都有可复核的调用点证据。 - kekelele996/gb-558-vulngraph

Contribute to d4ytox/CVE-2021-22205 development by creating an account on GitHub.

Vulnerability & exploit intelligence — ExploitDB, NVD, Metasploit search with CVE→ATT&CK mapping and LogNorm/HuntForge integration | Part of Nebula Forge - Rootless-Ghost/VulnForge

Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation - michalbednarski/TheLastBundleMismatch

OTP Bypass | Authentication Security | Understanding OTP vulnerabilities and digital account protection - owner-of-otp-bypasser/OTP-Bypass-

JA3/JA3S TLS fingerprinting tool written in Go. Identifies what software is making TLS connections by parsing raw ClientHello messages — detects browsers, scanners, pentest frameworks, and malware ...