apk-reverse
newliver666/apk-reverseAgent skill for Android APK reverse engineering: dex patching, unpacking, repacking, ad and paywall removal, native .so analysis, and runtime…
android-securitybinary-analysiscode-analysis+8
1.4k
newliver666/apk-reverseAgent skill for Android APK reverse engineering: dex patching, unpacking, repacking, ad and paywall removal, native .so analysis, and runtime…
ch0pin/rdxA native APK and DEX decompiler written in Rust
oscar-collado/langflow-cve-2026-17633-pocPoC for CVE-2026-17633 — Authenticated RCE in IBM Langflow OSS 1.0.0–1.10.3 via custom_component endpoint. Includes CVE-2026-17632 AST scanner bypass…
offensive360/sast-scan-actionGitHub Action for Offensive360 SAST scans and SARIF results. See the open-source program for eligibility and setup.
offensive360/mcp-serverMCP server that runs SAST scans on local codebases and returns findings with severity and fixes, enabling AI assistants to perform security analysis…
romain-deperne/cve-2026-77262Proof-of-concept exploit for arbitrary file read in mcp-atlassian via path traversal in confluence_upload_attachment, with analysis and reproduction…
mhtsec/cve-2026-84645Jenkins PersistenceRoot Deserialization RCE (SECURITY-3972) — PoC & analysis. Requires Item/Configure; affects weekly <= 2.579 / LTS <= 2.568.2
trachinus/cve-2026-4813Proof-of-concept exploit for authenticated remote code execution via XSLT injection in Lutece Core, demonstrating command execution through crafted…
toanln-cov/cve-2026-78071Stored XSS via Location Title in DPCalendar Free
ming1700/cve-2026-38192pluck-CMS-4.7.20-code-injection-vulnerability
hideki233/cve-2025-3248-langflow-rceProof-of-concept exploit for CVE-2025-3248, an unauthenticated remote code execution vulnerability in Langflow, demonstrating code injection via the…
sahiloj/cve-2025-5352Demonstrates a stored XSS vulnerability in lunary-ai/lunary's Analytics component, where unsanitized NEXT_PUBLIC_CUSTOM_SCRIPT injection leads to…
kx00007/cve-2026-39902Proof-of-concept exploit for authenticated OS command injection (CWE-78) in Cacti ≤1.2.30, achieving remote code execution with CVSS 7.2.
yadhukrishnam/cve-2026-25053Vulnerabilities in the Git node allowed authenticated users with permission to create or modify workflows to execute arbitrary system commands or…
unpredictable21/halo-2.25.4-cve-2026-67919Demonstrates an authenticated remote code execution vulnerability in Halo 2.25.4 via unvalidated plugin URI installation, including technical…
quetuan03/cve-2025-57926WordPress Passster Plugin <= 4.2.18 is vulnerable to Cross Site Scripting (XSS)
prabhatverma47/cve-2025-60787Proof-of-concept for CVE-2025-60787, demonstrating remote code execution in MotionEye <= 0.43.1b4 via client-side validation bypass and command…
mbanyamer/cve-2026-25546-godot-mcp-0.1.1-os-command-injectionProof-of-concept exploit for CVE-2026-25546, demonstrating OS command injection in godot-mcp via malicious projectPath parameter, with Python PoC and…