Python web vulnerability scanner that checks security headers, SSL expiry, SQLi error reflection, and web ports, and saves the report to web_report.json. - lucas-The-Coder/WebHawk

This is a Red Team & Penetration Test framework and toolkit for MacOS. - Rikuxx0/RedTeam_Toolkit_for_Mac

POC exploit for CVE-2026-68524 - preauth RCE in Apache OFBiz via request body shadowing the decorator location and file URI screen loading. Verified on 24.09.07, control on 24.09.08. - fixedbyreboo...

POC exploit for CVE-2026-73665 - unauthenticated RCE in FreePBX UCP via Socket.IO namespace auth bypass feeding CRLF injection into the Asterisk Manager Interface. Vulnerable 17.0.7 lab vs patched ...

POC for CVE-2026-90436 - unauthenticated remote class instantiation in Apache Axis 1.x via SOAP fault exceptionName, bypassing configured auth handlers. EOL software, no fix exists. - fixedbyreboot...

POC for CVE-2026-92414 - Apache Jackrabbit WebDAV preauth session hijack via derivable lock tokens. Verified against 2.22.4, control on fixed 2.22.5. - fixedbyreboot/CVE-2026-92414-POC

Python + Pytest 接口自动化与 UI 自动化实战框架合集（数据驱动 / MySQL 断言 / Allure 报告 / 越权漏洞检测） - 2481545332/QA-Automation-Portfolio

轻量智能合约安全漏洞案例库：收录 Solidity 经典安全漏洞，包含原理、漏洞代码、POC 与修复方案，面向区块链初学者 - zby193/smart-contract-vuln-case-lib_55

Content-aware validation and sanitization of file uploads for Django, Flask and FastAPI. Detects disguised and malicious files by their bytes, not their names. - IV1T3/uploadshield

Apache Airflow < 3.4.0: scheduler-side deserialization of task-controlled XCom (CVE-2026-86829) leading to code execution in the scheduler process. PoC, fixed-version control, and a triggere...

iQOO Neo7 竞速版 (PD2232/V2232A) 临时 root — CVE-2026-43284 页缓存写 + KernelSU LKM late-load。实机验证通过。 - q181555/pd2232-dirtyfrag

A centralized cybersecurity operations dashboard built with Python and Flask. Features an SSH honeypot, XSS vulnerability scanner, TCP port scanner, and brute-force log analyzer in a secure, authen...

Standalone AI vulnerability scanner: builds a target in Docker, scans it offline with Claude, keeps only findings whose reproducer runs. - xheavy0/Threadscan

Offline educational model of CVE-2026-104851 (fsspec ReferenceFileSystem Jinja SSTI) - federiconbaez/cortex9-fsspec-reference-jinja-ssti-model

Python-based OWASP web vulnerability scanner to detect SQLi, XSS, and Open Redirects with CVE mapping and HTML reports - Dhanu188/OWASP-Web-Vulnerability-Scanner-Beginner-Friendly-Security-Tool-

POC for CVE-2026-117017. Contribute to esecforte/PoC_CVE-2026-117017 development by creating an account on GitHub.

🪐 AetherScope V2 — SAST 3D WebGL & Serveur MCP (Claude/Antigravity/Cursor). Détection de 150+ CWE & Zero-Day Patterns (Rust, C++, PHP, Node.js, Web3), contrats EARS BLAKE3 et PoC Bu...

Authorized intranet black-box testing agent: scoped login, Burp/HAR triage, human-gated validation, JNDI plan-only, and portable reports. - devastatingglamour/intranet-pentest-agent

WordPress Core RCE via Predictable Staging Path (CVSS 8.1) - BlackHatExploitation/CVE-2026-119977

BugX 是面向开发者和 AI 编程宿主的本地优先、证据驱动 AI 代码审计与漏洞挖掘 CLI。它可以连接 Claude Code、OpenAI Codex、OpenCode、Cline、ZCode 等 MCP/ACP 宿主，检查真实源代码、复现缺陷、验证安全发现，并生成有证据支撑的安全报告。BugX 适用于应用安全、代码安全审查、漏洞挖掘和已验证缺陷复现。 - Bencibr/bugx