gichirimaku / wp2shell-PoC
CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.
gichirimaku / wp2shell-PoC
jburgess-r7 / CVE-2026-97229-PoC
GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image
code-zm / plex2shell
CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656
infobyte / faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
OWASP / Nettacker
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
alexandreborges / malwoverview
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
opencve / opencve
Vulnerability Intelligence Platform
wcventure / FuzzingPaper
Recent Fuzzing Paper
cve-search / cve-search
cve-search - a tool to perform local searches for known vulnerabilities
scverse / scanpy
Single-cell analysis in Python. Scales to >100M cells.
jorhelp / Ingram
网络摄像头漏洞扫描工具 | Webcam vulnerability scanning tool
vulnersCom / getsploit
Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.
ossf / cve-bin-tool
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
scverse / scvi-tools
Deep probabilistic analysis of single-cell and spatial omics data
mukul975 / cve-mcp-server
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
ssh-mitm / ssh-mitm
SSH-MITM - ssh audits made simple
0xMarcio / pocindex
Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.
omicverse / omicverse
A python library for multi omics included bulk, single cell and spatial RNA-seq analysis.
owasp-dep-scan / dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
topscoder / nuclei-wordfence-cve
80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒
ycdxsb / PocOrExp_in_Github
Automatically Collect POC or EXP from GitHub by CVE ID.
scverse / gget
🧬 gget enables efficient querying of genomic reference databases
larlarua / AutoCVE
Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.
Bert-JanP / Open-Source-Threat-Intel-Feeds
This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.
nix-community / vulnix
Vulnerability (CVE) scanner for Nix/NixOS [maintainer=@henrirosten]
scverse / anndata
Annotated data.
scverse / PyDESeq2
A Python implementation of the DESeq2 pipeline for bulk RNA-seq DEA.
aboutcode-org / vulnerablecode
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
scverse / squidpy
Spatial Single Cell Analysis in Python
vulnerability-lookup / vulnerability-lookup
Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure (CVD).
sakidekin / CVE-2026-41940-PoC
cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation
opaxial / CVE-2026-9830
CVE-2026-9830 Proof of Concept
aniqfakhrul / CVE-2026-54121
Certighost POC
hypnguyen1209 / CVE-2026-62911
POC pre-auth RCE on Exchange
ynsmroztas / KeySniper
**CVE-2026-18963** — unauthenticated Keycloak account takeover via the reset-credentials flow.
rafabd1 / CVE-2026-75604-poc
CVE-2026-75604 Next.js Windows RCE poc
dinosn / mikrotrick-poc
CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC
atvkh / ICVE_Toolkit
智慧职教(ICVE)/职教云课程自动完成工具:刷课、自动答题、自动讨论、补签改签,支持 SPOC/MOOC/资源库,免费全功能开源
watchtowrlabs / watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452
CVE-2026-8452 PreAuth RCE
chris-ritsen / samsung-tv-root
Samsung QN90B and QN90F root
DeathShotXD / Comment2Shell
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
sfewer-r7 / CVE-2026-55040
Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)
Boreas37 / CVE-2026-64638-PoC-XSS2Shell-
XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template
digiprosec / MicroTrick
cve-2026-86060 PoC
EQSTLab / CVE-2026-94545
Next.js RCE
san3ncrypt3d / vulnometry
Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS, CISA KEV, OSV and GHSA.
Snizi / CVE-2026-18963-Exploit
Exploit for KeyCloak CVE-2026-18963
xiabai2008 / ruoyi-scan
RuoYi (若依) dedicated vulnerability scanner: plugin architecture, three-state verdict, WAF bypass, exploit chains, AI POC generation, nuclei compatible. 若依专项漏洞扫描器
guneykabel / cve-2026-85706
Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.3.0–19.3.1
petermalone / CVE-2026-84543
Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability
ressl / cve-2026-87902-poc
PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab
TDK-99 / SnapplAI
🔍 Stop refreshing LinkedIn. This pipeline scrapes new job listings based on your settings, uses AI agents to summarize each one and score it against your CV, then delivers only the best matches straight to your inbox 📬 — so you're always first to apply 🚀
imbas007 / POC-CVE-2026-60206
cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security
imbas007 / CVE-2026-42533
nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.
Tangruwo / RuwoScan
基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。
abraxas / CVE-2026-87902
CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)
predyy / CVE-2026-34990
CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc.
datosh / nixos-vex
OpenVEX feed and NixOS module to manage NixOS CVEs, evaluated against your system's configuration.
tc4dy / CVE-2026-54121-PoC-Exploit
CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCSync. Safe Checker + full exploit, multi-threaded mass scan, Shodan integration, JSON/CSV/JSONL output. CVSS 8.8 High. Use Ethically, Stay Legal :v
Adolanium / hermes-plugin-shodan
Shodan.io for Hermes Agent. Host intel, search, DNS, CVE lookups, monitoring and on-demand scanning, with credit budgeting and response shaping that keeps results inside the context window.