Windows security UI for ClamAV/YARA with real-time shield, scheduled scans, SecuriteInfo/SaneSecurity signatures, DNS protection, quarantine, VirusTotal checks, and auto-updates. - orloxgr/ClamShield

A web penetration testing lab documenting manual exploitation of SQL Injection, Reflected XSS, and CSRF flaws. Showcases attack surface mapping and traffic interception using Burp Suite against an ...

Rag Poc for green exchange. Contribute to ankit-1999/Rag-green-exchange development by creating an account on GitHub.

0-click XSS (CWE-79) in Mozilla Pocket Android v8.33.0.0 via unsanitized $(document.body).html(content) in articleview-mobile.js. Background service triggers execution without user interaction. Jav...

Educational Linux x86_64 userland shellcode loader PoCs - Fadouse/linux-shellcode-loaders

drupal-postgresql-rce. Contribute to evidencebasedvulnerability/cve-2026-9082-drupal development by creating an account on GitHub.

Gigamon Unauth RCE (CVE-2026-36848). Contribute to calligraf0/CVE-2026-36848 development by creating an account on GitHub.

Contribute to WahyuAndikaPutra/CVE-2025-61882-OracleEBS-RCE development by creating an account on GitHub.

Web-based Vulnerability Scanner built with Python Flask that scans open ports, detects services, calculates risk score, visualizes results with charts, and generates downloadable PDF security repor...

VS Code extension that bridges Burp Suite security findings directly into your editor. - TheArqsz/BurpSense

A Burp Suite extension that allows you to automatically inject custom HTTP headers into all outgoing requests. - TheArqsz/BurpSuite-Just-Header-Injector

drupal-postgresql-rce. Contribute to evidencebasedvulnerability/cve-2026-9082 development by creating an account on GitHub.

Professional bug bounty style write-up demonstrating exploitation of a DOM-Based Cross-Site Scripting (XSS) vulnerability via insecure postMessage() handling in the PortSwigger Web Security Academy...

Proof-of-concept exploit for CVE-2023-24824 demonstrating how an arbitrary class loading primitive can be transformed into remote code execution on vulnerable Graylog deployments. - rootkiTED/grayl...

A cybersecurity project analyzing the Samy Worm (MySpace) attack, explaining Stored XSS vulnerabilities, attack methodology, and modern prevention techniques. - Akshaycyber006/XSS-Defense-Bootcamp-...

Proof-of-concept exploit for CVE-2023-24824 demonstrating how an arbitrary class loading primitive can be transformed into remote code execution on vulnerable Graylog deployments. - rootkiTED/grayl...

VulnPilot Burp Suite extension release. Contribute to Chinesespeople/VulnPilot development by creating an account on GitHub.

Contribute to KartikCodezz/Basic-Vulnerability-Scanner development by creating an account on GitHub.

A **Vulnerability Scanner** is a security tool that automatically scans computers, networks, or web applications to identify known security weaknesses, such as outdated software, misconfigurations,...

iCagenda Unauthenticated File Upload to RCE. Contribute to Polosss/By-Poloss..-..CVE-2026-48939 development by creating an account on GitHub.