Contribute to George0Papasotiriou/CVE-2026-21011-Log4j-style-JNDI-Injection-in-Custom-Logger-Simulated- development by creating an account on GitHub.

VirusTotal — the Google-owned (since 2012) threat intelligence platform that aggregates anti-malware engines and URL scanners to analyse files, URLs, IP addresses, and domains. The v3 API surfaces ...

Stairwell is a private-by-design threat intelligence and detection platform that gives security teams a continuously reanalyzed, isolated store of their own files as an alternative to crowdsourced ...

CVE-2026-66066 — KindaRails2Shell: Rails Active Storage/libvips Arbitrary File Read → SECRET_KEY_BASE Theft → RCE. Four-layer parser confusion. CVSS 9.5 | CWE-94 | Rails < 8.1.3.1 - shinthin...

C2 Frameworks & Post-extensionation – geavanceerde suite voor commando- en controlefuncties en post-extensionatie. - trussing201323-faradize/Advanced-C2-Framework-Suite

Free BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS controllers via PowerShell or Bash. - spinfosecurity/B...

Automated Web Vulnerability Scanner & Report Generator - Tsuru-chan/Auto-WV

Contribute to imbas007/POC-CVE-2026-58048 development by creating an account on GitHub.

Technical analysis of CVE-2026-52824: default APP_SECRET in the Kimai Docker image enabling unauthenticated login link forgery. Affects <= 2.57.0, fixed in 2.58.0. - AzureADTrent/CVE-2026-52824

【Java计算机毕业设计分享】基于Jboss的渗透测试研究平台，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - aqio84skux/HkfANkdeAN

【Java计算机毕业设计分享】基于Shiro框架的渗透测试管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - q015r4obh2/foRJNfsQUP

Proof of concept with GDB‑assisted exploitation (educational / lab use only) - rizlmaulanaa/CVE-2026-23479-Redis-UAF-Proof-of-Concept

Offline scanner for CVE-2026-29000 (CVSS 10.0) in pac4j-jwt — also finds the 4 packages the official advisory does not list. Single 25KB jar, zero dependencies, Java 8+. - xiaoqiMikko/pac4j-check

Coldcard 冷钱包漏洞 UTXO 穷举碰撞 PoC / High-performance UTXO collision tester. - coohash/Coldcard_BTC_UTXO_Collision

A threat actor may inject malicious content into webapp. The payload is not reflected in the HTTP request and response, then executed in the victim's browser - qeeqbox/dom-based-cross-site...

A threat actor may inject malicious content into webapp. The payload is reflected in the HTTP request and response, then executed in the victim's browser - qeeqbox/reflected-cross-site-scripting

Generate benign files that match YARA rules, without handling malware. - c2dc/aray

Docker-first C2 Framework Training Environment. Contribute to Ganron007/C2Stack development by creating an account on GitHub.

Python-based vulnerability scanner that detects open ports, identifies common services, and provides basic security recommendations. - bekxyj-source/vulnerability-scanner

CVE-2026-63223 — CI4RCE: CodeIgniter 4 is_image/mime_in File Upload RCE. Magic bytes bypass (getExtension vs getClientExtension). CVSS 9.8 | CWE-434 | CI4 < 4.7.4 - shinthink/CVE-2026-63223