ephemora-cell
michaels1011/ephemora-cellCapability-based WASM runtime for executing untrusted AI-generated code with enforced CPU, memory, time, I/O, and filesystem limits. Provides…
ai-securityapi-securitycloud-security+4
11
michaels1011/ephemora-cellCapability-based WASM runtime for executing untrusted AI-generated code with enforced CPU, memory, time, I/O, and filesystem limits. Provides…
p0pr0ck5/lua-ffi-libinjectionLuaJIT FFI bindings for libinjection, providing SQL injection and XSS detection with context-specific APIs for web application security.
cyberwulfy200-dev/cve-2026-0915-json-patch.-v2.0Enterprise-grade JSON validator security patch that fixes CVE-2026-0915 with strict schema validation, input sanitization, rate limiting, and…
minhhk68/cve-2026-13736Proof-of-concept exploit and technical advisory for an unauthenticated member PII disclosure in a WordPress REST API directory plugin, including…
commando-x/vuln-bankIntentionally vulnerable banking platform for practicing web application, API, and AI/LLM security testing, secure code review, and DevSecOps…
davkharrr/cve-2026-19478-pocProof-of-concept exploit for unauthenticated remote code injection in GitLab's GraphQL API, using crafted queries to modify or delete public projects…
horkimhab/cve-2026-19650-cve-2026-19478Proof-of-concept exploit resources for CVE-2026-19650 and CVE-2026-19478 targeting a GitLab GraphQL vulnerability, intended for authorized research,…
0xdak/cve-2026-59243_exploitExploit for Apache Airflow FAB OAuth authentication bypass (CVE-2026-59243) that achieves admin access and remote code execution by triggering a…
cc1a2b/jshunterjshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive…
george0papasotiriou/cve-2026-3456-oauth2-pkce-race-condition-account-takeover-Python PoC for CVE-2026-3456 demonstrating OAuth2 PKCE race-condition account takeover, with a vulnerable auth server and concurrent code-verifier…
placeos/authPlaceOS authentication service and API gatekeeper.
iqbalx7/wp2shellunauthenticated RCE in WordPress core (CVE-2026-63030 + CVE-2026-60137)
learner202649/cve-2025-11203-pocThe code for personally reproducing the corresponding vulnerability
opnsense/coreOPNsense GUI, API and systems backend
mrmtwoj/fix-cve-2026-60137-cve-2026-63030-in-wordpressCVE-2026-60137Temporary Emergency Mitigation for CVE-2026-60137 & CVE-2026-63030 (wp2shell)
shoucheng3/apache__dubbo_cve-2021-30180_2-7-9Exploit for CVE-2021-30180 targeting Apache Dubbo RPC framework, enabling remote code execution via crafted RPC requests in vulnerable versions.
shoucheng3/hibernate__hibernate-validator_cve-2019-10219_6-0-17-finalReference implementation of Bean Validation 2.0 (JSR-380) providing annotation-driven metadata model and API for JavaBean and method validation with…
stayfoolish777/cve-2022-22947-poc批量检测Spring Cloud Gateway 远程代码执行漏洞 Spring_Cloud_Gateway_RCE_POC-CVE-2022-22947