Standalone defensive checker project for Sharp/librsvg CVE-2026-96889. One exploit per repository; evidence-based assessment without exploit payloads. - CompleteTech-LLC/sharp-rsvg-rce-check

CVE-2026-102785 YOOtheme Pro 5.0.0-5.0.52 │ Unauthenticated RCE Mass Exploit & WAF Bypass - antid00t/CVE-2026-102785

Contribute to lesterlam/onigmo-cve-2026-110264 development by creating an account on GitHub.

Build a YARA rule to detect a sample that uses sandbox/VM evasion, on disk and in memory - jeremyt12345/Yara-Rules-Detection

YARA-based malware scanner with Wazuh/Shuffle integration, ML detection, and HTML reports - InfraSecID/yaracop

CyberSci Defence CTF 101 lab: remediation of SQL injection, broken access control, JWT forgery, and stored XSS, with validation evidence - harshs4711/cybersci-defence-ctf-lab

Standalone defensive checker project for CVE-2026-56846: Node.js: HTTP/2 retained header memory exhaustion. One exploit per repository; implementation pending. - CompleteTech-LLC/node-cve-2026-5684...

Offline evidence checker for NetScaler CVE-2026-88771. Edition-aware firmware assessment, separate threat metadata, standalone Python, no exploit payloads. - CompleteTech-LLC/netscaler-cve-2026-887...

regex2shell (CVE-2026-110264 + family) — GitLab/Onigmo unauth regex RCE research: safe differential detector, deterministic interpreter kill, match-time write primitive - FranklinF25/regex2shell

BOF that enables SeDebugPrivilege on the current process and injects shellcode into a target process. Designed for AdaptixC2. Not OpSec safe by default. - retimax/SeDebugPrivilege-BOF

Passive Java/J2EE vulnerability scanner plugin for Caido (the Caido equivalent of Burp J2EEScan). - HiJynx/caido-j2eescan

Standalone defensive checker project for CVE-2026-88773: Citrix NetScaler ADC / Gateway: HTTP request smuggling. One exploit per repository; implementation pending. - CompleteTech-LLC/netscaler-cve...

Standalone defensive checker project for CVE-2026-88778: Citrix NetScaler ADC / Gateway: Predictable TCP initial sequence numbers. One exploit per repository; implementation pending. - CompleteTech...

A tiny YARA-style rule engine in pure Python: rule parser, Aho-Corasick single-pass matching, hex/regex strings, secret & file-type rules - HisokaDrip/pyara

CVE-2026-109619 PoC lab. Contribute to Taz1920/cve-2026-109619 development by creating an account on GitHub.

Standalone defensive checker project for CVE-2026-102256: SonicWall SMA1000 (6210, 7210, 8200v): Authenticated remote code execution. One exploit per repository; implementation pending. - CompleteT...

Malware analysis case study: what Windows Defender flagged in an archive.org J2ME phone-game dump (static triage, VirusTotal enrichment, IOCs, YARA) - talls2/j2me-dump-malware-analysis

PHP 8.5.11 - Critical - Remote - UAF - CVE-2026-109619 PHP2Shell. Same-worker fatal backtrace then INI diagnostic on Apache mod_php. Lab vs 8.5.12. Advisory RCE inferred. - abraxas/php-stale-global...

PHP 8.4.26 - Critical - Remote - OOM longjmp - CVE-2026-109618 PHP2Shell. Unauth chunked multipart hits memory_limit before app code on Apache mod_php. Lab vs 8.4.27. Advisory RCE inferred. - abrax...

By combining CISA KEV (active weaponization signal), OSV.dev (ecosystem package-version boundary mapping), and deps.dev (reverse-dependency topological reach), this repository acts as an Action Dis...

Phishing awareness demo: fake QQ login page that reveals itself right after submit; records nothing. 钓鱼安全教育演示 - Principia-rain/phishing-demo