Offline static vulnerability scanner for extracted embedded/IoT firmware filesystems - Ayush-X003/firmware-vuln-scanner

Contribute to ChrisSEC2014/joomla-content-editor--RCE development by creating an account on GitHub.

Web pentesting & vulnerability reconnaissance framework with CLI pipeline. Detects SQLi, XSS, CORS misconfigurations, Verb Tampering, and DOM-based flaws. Designed for authorized bug bounty...

CVE-2026-32475 The Elementor Pro Forms File Upload field handles validation and file processing in two separate loops with different handling of empty upload entries (UPLOAD_ERR_NO_FILE). An unaut...

The best tool for XSS attack. Contribute to Mr-Destroyer/XSStriker development by creating an account on GitHub.

Fucker is Web Application Vulnerability Scanner . Contribute to Mr-Destroyer/Fucker development by creating an account on GitHub.

Offline static vulnerability scanner for extracted embedded/IoT firmware filesystems - hunter1910/firmware-vuln-scanner

Full black-box penetration test against an Ubuntu 22.04 LTS server — recon, dual initial access (Tomcat RCE + Shellshock), SUID privilege escalation, hash cracking, and Nessus credentialed scan. In...

Automated Vulnerability Scanner and Remediation Engine built using Spring Boot, React and Chrome Extension - gurikaur2/automated-vulnerability-scanner

Read-only PoC for CVE-2026-65400 — macOS Screen Sharing (screensharingd) pre-auth SRP bypass giving root file read. Patched in macOS 26.6.1 / 15.7.9 / 14.8.9. - panchocosil/CVE-2026-65400-poc

PoC for J2Store CVE-2026-67358–67362 (J2Commerce security advisory Aug 2026) - murrez/CVE-J2store-2026

PanSphaira — open-source local proof of concept for governed AI-agent actions across business systems, with policy, approval, brokered execution, authoritative readback, and receipts. - JoFe2/PANSP...

A graveyard of critical vulnerabilities I've discovered, along with their PoCs - sn0x-sharma/ZEROGRAVE

Fully contained AES-256-CBC encrypted shellcode DLL loader with 4 exection methods - bloggins/aes256_loader

Unauthenticated RCE PoC for exposed DeepSeek Harness (dsh) web instances. - ChaoMixian/dsh2shell

Reflected XSS via price_from / price_to Filter Parameters in PhocaCart - toanln-cov/CVE-2026-76565

Stored XSS via User-Agent in Admin Order View in PhocaCart - toanln-cov/CVE-2026-76564

PoC for CVE-2026-58455: Dockwatch <=0.6.567 unauthenticated RCE. Stdlib-only Python. - Boreas37/CVE-2026-58455-PoC

JCEzploit is a powerful, fully-automated RCE exploit for Joomla JCE (CVE-2026-48907) featuring interactive shell, batch command execution, file download capability, and proxy support. Built with Py...

Burp Suite extension for authorisation testing: replays requests as multiple identities and unauthenticated, with scripted session maintenance for short-lived logins - OmniCyber-Security/burp-auth-...