CVE-2026-114509 — Laravel TokenGuard authentication bypass (CVSS 9.2): PoC, root-cause analysis, Docker lab, and reproduction guide - ArioVeisa/cve-2026-114509-laravel-tokenguard

OpenAsy Malware agent: scans its host and the servers in hosts.yaml with ClamAV and YARA, read-only, and sends detections to malware. - openasy/malware-agent

Production-grade EDR/Antivirus Engine - Rust, YARA, ML, Real-time monitoring, Encrypted quarantine, REST API, Web UI - cokovali10-sketch/CoreEDR

verdict - It contains RCE, use it on your own risk - tarun1sisodia/PHP2SHELL

Solidity/Foundry PoC demonstrating a rounding exploit in Morpho Midnight. - vaultvult/tenor-labs-solidity

exploit php2shell (CVE-2026-109618 / CVE-2026-109619) for educational purposes - zr0n/php2shell

libhv dns_name_decode: heap overflow to code execution (independent PoC + writeup). Bug originally reported in ithewei/libhv#851. - turky-1/libhv-rce

PHP2Shell CVE-2026-109618/109619: lab-verified reproduction, root-cause analysis & visualizations (educational) - zhuyihenzheng/php2shell-repro

Ultimate Web Vulnerability Scanner by Ridox. Contribute to ahmedridox-create/ridox-scanner development by creating an account on GitHub.

This is a lab exercise on Reflected XSS using BeEF tool, In this we learned how to exploit reflected XSS in DVWA and hook a browser to BeEF for browser exploitation. - pritisurya9-ai/Reflected-XSS-...

A modular Python CLI tool for authorized web security testing, with dependency-aware scanning and JSON/HTML reports. - sahadatx/Web-Vulnerability-Scanner

SSRF-safe fetch for Node.js: blocks private, loopback and cloud-metadata addresses, checked at connect time so DNS rebinding can't get around it. - amanjhacodes55/fetch-ssrf-guard

Detection and response package for php2shell (CVE-2026-109618 / CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code. - Cyphe...

High-confidence, zero-false-positive software supply chain & package guard powered by go-yara - cawalch/go-yara-supplychain

Antivirus et optimiseur gratuit pour Windows (v1.0). Interface WinUI 3, ClamAV et YARA. Aucun compte, aucune publicité, aucune télémétrie. - 1donatien0/optiCOMBAT

Free, open-source vulnerability scanning for small security teams: a self-hosted scanner that runs Nuclei templates, with triage and escalation built in. - goodnightsec/gn-check

Contribute to Masriyan/Exploit-CVE-2026-110264-GitLab-CE-EE-RCE development by creating an account on GitHub.

Offline evidence checker for NetScaler DTLS CVE-2026-88772. Per-vserver configuration and firmware assessment; standalone Python; no exploit payloads. - completetech-security/netscaler-cve-2026-887...

OpenAsy DAST agent: runs Nuclei and ZAP inside your network, only against targets proven to be yours, and sends the findings to dast. - openasy/dast-agent

Adversary Emulation Framework. Contribute to ACRT-EVAL/sliver-329-cr11 development by creating an account on GitHub.