GitLab CE/EE unauthenticated arbitrary file read (CVE-2026-85706) - PoC - mhtsec/CVE-2026-85706

python web vulnerability scanner built. Contribute to tziatziospanagioths/simple-python-scanner development by creating an account on GitHub.

🔐 Python Vulnerability Scanner A Python-based network vulnerability scanner built with Nmap for authorized security testing, CTFs, and lab environments. - judejacob1027-hack/vulnscanner

OpenPanel Unauthenticated Server-Side Request Forgery (SSRF) - hotplugin0x01/CVE-2026-85612

Repository to support co-development of microscopy image analysis of nuclei as well as objects and structures within them. - lhilbert/Nuclei-And-Inside

CVE-2026-79294 — Stored XSS in Moonshot AI Kimi's HTML artifact Preview, delivered through the public Share view, leading to session token exfiltration and demonstrated account takeover. Re...

Marimo WS Preauth RCE. Contribute to julichaan/CVE-2026-39987_POC development by creating an account on GitHub.

Self-contained SSRF research lab — 7 services, 13 scenarios, 6 bypass techniques, detection rules, and an animated dashboard. All on 127.0.0.1. - het-P301204/spectre-ssrf-lab

Production-grade full-stack URL shortener SaaS with real-time analytics, dynamic QR codes, custom aliases, SSRF security guard, rate limiting, and Next.js 15 App Router. - VinayKrishna-7/Url_shortener

lightweight Linux command-and-control (C2) framework - imankhayam/echidna

Burp extension that auto-names Repeater tabs to "{METHOD} {PATH}" - sdushantha/repeater-tab-auto-namer

Investigation note, IOCs, YARA rules and samples for crisp-worker-rig, a self-healing WordPress backdoor with Ethereum (EtherHiding) C2 - rwillmann/crisp-worker-rig-investigation

CVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free & Race Condition PoC research, diagnostic scanner, and security audit module for AI Security Tool. - SyntaxMethod/CVE-2...

PoC for CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local file read - solivaquaant/CVE-2026-85706-PoC

ACRA is a Burp Suite extension for advanced authorization security auditing, correlating URI, identity, role, tenant, resource ownership, workflow state, policy, and evidence to identify access-con...

A Go-based vulnerability scanner for Linux hosts that checks installed packages against Red Hat, Debian, Ubuntu, and Alpine CVE feeds, then reports impacted packages with version-aware matching, su...

Proof infrastructure for autonomous vulnerability patching — proves in your own CI build whether a CVE is actually exploitable, at PR time. - ferralon-ai/ferralon-assay

CVE-2026-89013 Exploit — Authorization bypass in Dolibarr via the hashp parameter, enabling unauthenticated access to protected documents and files. - Faceless0x7/CVE-2026-89013

CVE-2026-89012 Exploit — SQL filter denylist bypass in Dolibarr via case-insensitive SQL column resolution and case-sensitive denylist matching. - Faceless0x7/CVE-2026-89012

JOCKY - forensic scripting framework that runs without triggering security solutions (SIH 2026, PS SIH26148, NTRO). Custom language, polymorphic bytecode, native Rust VM, C2 fabric. - A73r0id/jocky