lightweight Linux command-and-control (C2) framework - imankhayam/echidna

Production-grade full-stack URL shortener SaaS with real-time analytics, dynamic QR codes, custom aliases, SSRF security guard, rate limiting, and Next.js 15 App Router. - VinayKrishna-7/Url_shortener

Self-contained SSRF research lab — 7 services, 13 scenarios, 6 bypass techniques, detection rules, and an animated dashboard. All on 127.0.0.1. - het-P301204/spectre-ssrf-lab

Marimo WS Preauth RCE. Contribute to julichaan/CVE-2026-39987_POC development by creating an account on GitHub.

CVE-2026-79294 — Stored XSS in Moonshot AI Kimi's HTML artifact Preview, delivered through the public Share view, leading to session token exfiltration and demonstrated account takeover. Re...

Repository to support co-development of microscopy image analysis of nuclei as well as objects and structures within them. - lhilbert/Nuclei-And-Inside

OpenPanel Unauthenticated Server-Side Request Forgery (SSRF) - hotplugin0x01/CVE-2026-85612

🔐 Python Vulnerability Scanner A Python-based network vulnerability scanner built with Nmap for authorized security testing, CTFs, and lab environments. - judejacob1027-hack/vulnscanner

python web vulnerability scanner built. Contribute to tziatziospanagioths/simple-python-scanner development by creating an account on GitHub.

GitLab CE/EE unauthenticated path traversal (CVE-2026-85706) - PoC - mhtsec/CVE-2026-85706

🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep Dive Analysis & Audit Module). - ZeroDayEvil/CVE-2026-41096-PoC

Writeup: Hackcar - DockerLabs (Node.js Inspector RCE + CVE-2025-55182 React2Shell) - iapetus12/hackcar-writeup

Security advisory: stored XSS via HTML-entity bypass of the dolPrintHTML javascript: filter in Dolibarr <= 24.0.1 (CWE-79, CVSS 8.0) - maidou193-dot/dolibarr-24.0.1-xss

由夜安团队研发的代码审计平台，涵盖十多种常用语言，提供从上传源代码、审计、靶机验证到生成报告的一站式流程，并最终形成真正可用的 POC。平台致力于发现最真实的漏洞（包括评级与漏洞本身），同时将成本控制在最低水平。在如何平衡成本与发现高危、严重真实漏洞之间，我们将持续探索研究。 - Yean-Sec/StrikeAgent_Coder-Flash

AI-assisted framework for evidence-based validation of web application vulnerability scanner findings. - Niks2801/AI-web-vulnerability-validation-framework

CVE-2026-15667 WordPress Event Solution LFI POC. Contribute to cflowsec/CVE-2026-15667 development by creating an account on GitHub.

🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports - eldarshiraliyev/BugScanner

Self-hosted web file manager with OIDC auth, Rust backend and Vue frontend. - adamhogle/yet-another-file-manager

Exploit for CVE-2017-7921, targeting the improper authentication vulnerability affecting Hikvision camera systems. - Th3Purge/CVE-2017-7921-Exploit

2026： 完整 Coruna 漏洞及 DarkSword 零日（0day）情报. Contribute to dashen666666-gif/DarkSword- development by creating an account on GitHub.