Safe CVE-2026-83844 Microsoft Paint host assessment and clearly separated synthetic shell lab - zake1god/CVE-2026-83844

Signal K Server resources API path traversal audit (CVE-2026-123807): read JWT secret, forge admin token, verify RCE - qianlijaingshan/signalk-audit

Official Build & Verified Release | 基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。 - kush-coder/autopilot-vulnclaw-v2

CVE-2021-44228 Research, Attack Simulation and Blue Team Detection Lab - DatLang777/Log4Shell-BlueTeam-Detection-Lab

Catch SSRF and credential leaks in UTCP manuals, MCP server configs and OpenAPI specs, before they reach CI. - boy-373/utcp-lint

多内核代理管理面板：Xray / sing-box / mihomo / Hysteria2 统一管理，内置套餐售卖、用户中心、工单与多主控高可用 - PolarisPanelOrg/Polaris

Vulnerability (CVE) scanner for Nix/NixOS [maintainer=@henrirosten] - nix-community/vulnix

FortiGuard Labs companion for the Omarchy bar: Outbreak Alerts, Threat Signals, Fortinet PSIRT advisories and lookup. Not affiliated with Fortinet. - charbelsarkis/omarchy-bastion

Security Research Toolkit and HackSkills Knowledge Base - Authorized Penetration Testing, Bug Bounty, Web/API Security - 123caiji/security-research-toolkit

通研网络蜜罐. Contribute to tongyaninfo/tongyan-honeypot development by creating an account on GitHub.

Validated OT/ICS CVE POCs from 2026 with firmware verification - Schneider SCADAPack, Modicon M580, nanoMODBUS, IEC 104, TDengine, Langflow - dexteon/ot-ics-cve-pocs-2026

Containerised PoC for CVE-2026-121653: unauthenticated SQL injection (CWE-89) in the Ivanti Endpoint Manager Core status-event service leads to RCE through the Core database account. A model of /WS...

Lab-validated Nuclei templates authored by Securin and merged into projectdiscovery/nuclei-templates - securin-public/securin-nuclei-templates

CVE-2024-8859: MLflow dbfs path traversal (arbitrary file read). Lab-only PoC, detection, remediation. Authorized testing only. - dexteon/mlflow-dbfs-path-traversal-cve-2024-8859

CVE-2025-29927: Next.js middleware authorization bypass. Lab-only PoC, Sigma detection, remediation. Authorized testing only. - dexteon/nextjs-middleware-auth-bypass-cve-2025-29927

Official Build & Verified Release | Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices - kush-coder/autopilot-vuls

A Vulnerability Scanner is a cybersecurity tool designed to identify security weaknesses in a computer system, network, or website. It scans for common vulnerabilities, detects potential security r...

Contribute to YuKongA/CVE-2026-98260 development by creating an account on GitHub.

Apache httpd mod_http2 (2.4.55-2.4.70) races on the connection allocator when assign_headers() writes the synthesised Content-Length: 0 into the shared stream table, corrupting the child heap. Cont...

Detection-only triage for Apache HTTP Server 2.4.71 batch: CVE-2026-119618 (mod_http2 RCE, CVSS 9.8), CVE-2026-106023, CVE-2026-109163. Grades httpd versions, catches the distro-backport and mod_h2...