react2shell - CVE-2025-55182 (Next.js: CVE-2025-66478) - Unauthenticated RCE in React Server Components (Flight Protocol) - PoC Exploit - rvzsec/react2shell

AI gateway for Burp Suite — expose Burp's full toolchain to MCP clients - Nixon-H/BurpGate

GitHub CVE POC 情报监控系统 · 威胁情报实时推送 · 含优雅 Web UI. Contribute to adminlove520/poc-monitor-official development by creating an account on GitHub.

Burp Suite extension that color-codes proxy history entries based on listener port. Similar to PwnFox but port-based. - dhakal-bibek/deduplighter

Trustless, non-custodial P2P exchange between Pearl (PRL) and Bitcoin (BTC): signed-intent matching + atomic-swap settlement + forfeitable secret-tied bonds - kingonly/pearl-dex

BlandC2 - Python-based Command and Control (C2) framework for remote administration with server module, client builder, persistence mechanisms, and cross-platform command execution. - blandteampr/B...

PowerShell reverse-shell payload generator engineered to bypass Windows Defender and AMSI. - Red-Parakeet/PhantomShell

Spoof dirty SELinux policy fingerprints on rooted Android to bypass DirtySepolicy detection - brianly1003/DirtySepolicySpoof

Web application security testing report and PoC screenshots (SQL Injection, XSS, Authentication Flaws). - devarsheambika18/FUTURE_CS_01-Web-Application-Security-Testing

Static analysis, IOCs, and YARA rules for the RBToolsBetaTest BAS loader (obfuscated Go downloader + abused BrowserAutomationStudio framework). - beatsbyluca/RBToolsBetaTest-loader-analysis

CVE-2026-25860 POC git. Contribute to partywavesec/CVE-2026-25860 development by creating an account on GitHub.

AI-DLC demo: URL metadata service (realistic SSRF) for Secure AI-DLC gate test - owen10380/aidlc-urlmeta-demo

Nginx RCE chain PoC with CVE-2026-9256 and CVE-2026-42945 - y198nt/Nginx-chain-Rift-Poolslip

A blazing-fast macOS antivirus CLI + TUI in Rust (defense-in-depth: hashes + YARA + heuristics + persistence audit) - Rani367/Armadillo

Security research on Craft CMS authentication mechanism - 0xrixet/Craftcms-PoC-CVE-2026-31266

Contribute to deadparrot610/yara-rules-management development by creating an account on GitHub.

PoC: Codex CLI hook trust hash pre-computation - silent RCE via SessionStart hook - psydck-pysdck/codex-hook-trust-bypass-poc

Web vulnerability scanner built in Python — headers, crawler, XSS and info leakage detection - especamilhal/vulnerability-scanner

CVE-2026-48866 — Gravity Forms <= 2.10.0.1 Arbitrary File Deletion via Path Traversal (CVSS 9.6) - 0xABCD01/CVE-2026-48866

CVE-2026-41940 is a critical authentication bypass vulnerability affecting cPanel and WHM. This repository is designed to demonstrate its Proof-Of-Concept - olofsatte/CVE-2026-41940-PoC