Production-grade async web vulnerability scanner - SQLi, XSS, SSRF, LFI - shamoon572/web-vuln-scanner

Marimo Pre-Auth RCE. Contribute to h3raklez/CVE-2026-39987 development by creating an account on GitHub.

An automation tool to help copying content from local repository to web application of ChatGPT, Claude and Gemini. - tzencirkiran/c2llm

Security assessment report of a deliberately vulnerable web application, demonstrating exploitation of SQL Injection, Command Injection, Cross-Site Scripting (XSS), and Authentication Bypass vulner...

Early warnings before threats hit your stack. Zero-days, supply chain attacks and active exploits: curated and filtered to your tools. - Richard3332/0day-app

Role-based ERP for colleges — Flask + MySQL portal for students, faculty, and admins with OTP auth, CSRF, rate limiting, and Chart.js analytics. - aakri0/student-erp-management-system

هذا المشروع هو عبارة عن نظام جسر شبكي افتراضي (Virtual Network Bridge) مصمم لتسهيل الاتصال بين جهازين (Peer-to-Peer) عبر وسيط سحابي، مع حل مشكلة تضارب المنافذ المحلية. - BayLak-Egypt/c2-free-google...

DNSly is an iOS app that uses DNS tunneling to bypass internet censorship. - breakthebarriers/DNSly

CVE-2026-41651. Contribute to 0xBlackash/CVE-2026-41651 development by creating an account on GitHub.

CVE-2026-41177, a Blind SSRF vulnerability in Squidex CMS (prior to v7.23.0). Includes root cause analysis, reproduction steps, and impact assessment regarding Local File Interaction (LFI). - Turki...

astrbot上下文注入插件，防止压缩后丢失记忆。叶枔枖设计，沈砚清编写。. Contribute to yussica1016/astrbot_context_injection_system development by creating an account on GitHub.

Stealth headless browser for AI agents — bypass Cloudflare, bot detection, and anti-scraping. Drop-in Puppeteer/Playwright replacement. - jo-inc/camofox-browser

A secure web-based student voting system using fingerprint authentication. Built with Python Flask, Firebase Firestore, and Flask-WTF. Features CSRF protection, double-vote prevention, session mana...

Powershell framework for interweaving Powershell and Python API automations for blueteams - hisurfadvisory/MACROSS

CVE-2026-0740. Contribute to murrez/CVE-2026-0740 development by creating an account on GitHub.

PT4-driven exploitative NLHE assistant: pattern mining, Bayesian ranges, soft policy over GTO weights - drcitrino/poker_ai_exploiter

A deliberately vulnerable test website built for practicing web security testing using Burp Suite. This project includes common vulnerabilities like XSS, SQL Injection, and authentication flaws to ...

Contribute to jovlu/csrf-xss-sqli-lab development by creating an account on GitHub.

Django 框架在使用 PostGIS 查询地理栅格（raster）数据时，若将未经验证的用户输入直接作为 band index（波段索引）参数，会引发 SQL 注入 - sw0rd1ight/CVE-2026-1207

Identified and documented SQL injection, cross-site scripting, and CSRF vulnerabilities in a database-backed web application, then applied secure coding fixes and database hardening controls. - eri...