WordPress Core <= 7.1.1 unauthenticated LFI to RCE - validation lab, PoC, nuclei template (GHSA-7hp8-65ch-5whp) - Hassham1/CVE-2026-87902

Burp Suite extension for importing saved Request/Response XML items back into the Site Map. - 0xBrAinsTorM/Burp-Save-Item-XML-Importer

Studio tecnico e PoC della Stored XSS non autenticata nei commenti di WordPress 7.1, corretta in WordPress 7.1.1. - Federico1976/wordpress-7.1-comment-stored-xss

This project proposes a novel framework for predicting vulnerability exploitability using dynamic datasets and optimized scoring mechanisms. - sounthararajan2/DYNAMIC-DATA-UPDATES-AND-WEIGHT-OPTIM...

A modular offensive security framework written in Rust, designed for authorized penetration testing and red team operations. - G4sp4rCS/C2R2-v2

Vulnerability scanner CLI: scans OS packages (RPM, DPKG, APK), OSS dependencies (PyPI, npm/yarn/pnpm, Go, Composer, Maven, Gradle, JAR), and Docker images for known CVEs via the heretix API, emits ...

Professional TryHackMe SuperSecretTip walkthrough covering source-code disclosure, XOR secret reconstruction, SSTI, RCE, Linux lateral movement, PATH hijacking, cron abuse, and root-context curl co...

Rapidly Search and Hunt through Windows Forensic Artefacts - WithSecureOpenSource/chainsaw

HTML5 parser internals from scratch: insertion modes, the stack of open elements, the foster-parenting algorithm, and how it enables mutation XSS. - Robert-Doe/foster-parser

GET/POST HTTP request handling from raw bytes to a hardened web app, with the XSS attacks/defenses built on top, in PHP and Node. - Robert-Doe/requestcraft

Vulnerability management dashboard tracking CVEs across servers, containers, and network appliances (Fortinet, Palo Alto Networks, Cisco, and more), with EPSS/KEV prioritization, SLA tracking, and ...

Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to conditional RCE (WP 4.7.0-7.1.1, fixed 7.1.2). Authorized/d...

Authorized security research prototype for KLG/XSS analysis. - xuanhai0913/klg-xss-hailamdev

SSRF-hardened FastAPI service behind the DNS/TLS and site-metadata tools on ayron.in. Pins connections to pre-validated IPs to defeat DNS rebinding. - ayronjins/ayron-tools-api

Vulnerability scanner. Contribute to 008479010-source/Web-Application-for-Vul-Scanner development by creating an account on GitHub.

Backup extraction analyzer - mines device backups for credentials, keys and sensitive data. - 5h4d0wn1k/m6-backup-extract

Contribute to nebula031/CVE-2026-93616-PoC development by creating an account on GitHub.

Critical Zero-Authentication Vulnerability Alert! CVE-2026-87902 carries a massive CVSS 9.2 rating affecting nearly every version of WordPress Core from 4.7.0 up through 7.1.1. how attackers chain...

Nuclei template for thorough Firebase service discovery - realtime database, firestore, storage, hosting, functions and linked GCP endpoints, with strict matching. - CypherNova1337/Firebase_Nuclei

Browser exploitation lab - DOM-based attacks and client-side defense exercises. - 5h4d0wn1k/web12-browser-exploit