Pre-authentication RCE in Cisco CUCM 15.x via Apache Axis JNDI injection — independent chain, survives Silent;Call patches - 0xReadingSteiner/Dead-Dial

Contribute to orfloresti/devtalks-xss development by creating an account on GitHub.

A secure Task Manager REST API with JWT + Google OAuth (Passport.js) auth, HTTP-only cookie sessions, owner-scoped task routes, helmet/xss-clean/mongo-sanitize hardening, rate limiting, and central...

CVE-2026-23744 is an unauthenticated command injection in MCPJam Inspector ≤1.4.2 via /api/mcp/connect. This POC exploits it by sending a crafted JSON payload to execute arbitrary commands, grantin...

Web vulnerability scanner — XSS, SQLi, CRLF, path traversal, command injection, open redirect, security headers - devkroz/vuln-scanner

CVE-2026-9198利用代码. Contribute to CuteeCat/CVE-2026-9198 development by creating an account on GitHub.

Single-node Wazuh 4.12.0 stack deployed on the management segment of a multi-VLAN home SOC lab, with agents enrolled on a Windows domain controller and workstation, plus a custom MITRE ATT&...

This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports - ThreatLabz/iocs

DFIR and Malware Analysis Lab - FlareVM, REMnux, Ghidra, CAPA, YARA, Volatility 3 - ronankongala/dfir-malware-lab

独立 APK：CVE-2026-43499 GhostLock 提权 + Shizuku shell 身份执行 - oopnv70-lab/ghostlock-apk

WP2Shell is a powerful and modular exploit framework that combines two critical WordPress vulnerabilities (CVE-2026-63030 and CVE-2026-60137) to achieve complete compromise of a target site without...

XSS2Shell ULTIMATE v3.0 is a powerful exploitation tool that chains Cross-Site Scripting (XSS) vulnerabilities in WordPress to achieve Remote Code Execution (RCE). This tool exploits CVE-2026-64638...

Exploit for pgAdmin4 Remote Code Execution (RCE) vulnerability affecting versions 8.10 to 9.1. - g0d150ne/CVE-2025-2945

AI-powered PHP vulnerability scanner and static security analyzer for detecting SQL injection, XSS, RCE, malware, backdoors, secrets, and insecure code. - BangPiyus/php-ai-security-scanner

Ultimate Vulnerability Scanner - Web + Cloud + Infrastructure 100+ Vulnerability Types • 1100+ Payloads • Full Takeover Capable - g0d150ne/God-eye

Burp Extension to add additional functionality for pentesting websocket based applications - snyk/socketsleuth

BEAR-C2 is an adversary simulation and emulation framework built around real world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups. - S3N4T0R-0X0/BEAR-C2

AI-powered Web Vulnerability Scanner. Contribute to Roxxhard/SentinelScan development by creating an account on GitHub.

Caido plugin that ranks HTTP responses by anomaly using a Burp-inspired categorical frequency model. - aleister1102/anomaly-ranker-caido

DEEPSLOP — PS5 WebKit exploit kit (RCE dashboard): PROBE mode, self-porting offset scanner, LOW_MEM, beacon logging, REPL loader - badrcoderman/deepslop