Tools

horkimhab/cve-2026-10795

Educational repository for CVE-2026-10795 research, providing proof-of-concept resources and guidance for authorized security testing in isolated…

horkimhab/cve-2026-83548-cve-2026-83549

Educational repository for researching CVE-2026-83548 and CVE-2026-83549, providing proof-of-concept resources and guidance for authorized security…

dinosn/cve-2026-75650-magento-validation-lab

Docker lab for validating the CVE-2026-75650 Magento component-level PHP execution primitive and Adobe VULN-39341 patch.

gmh5225/cve-2024-31969

Provides a proof-of-concept check script and documentation for CVE-2024-31969, a local privilege escalation in sudo's sudoedit, including affected…

htrxuan/hdwebmobile-booking-appointments

Sell bookable services and appointments through WooCommerce -- closes CVE-2026-2931 by construction.

horkimhab/cve-2026-13181-cve-2026-13182-cve-2026-13183-cve-2026-13184

Educational proof-of-concept for Telerik padding oracle vulnerabilities (CVE-2026-13181-184) with scripts for authorized security testing and…

mhicairo-hue/cs50-cybersecurity-final-project

Technical analysis of the XZ Utils backdoor (CVE-2024-3094), explaining the supply chain attack, obfuscation techniques, and impact on OpenSSH via…

geeksikhsecurity/ai-tool-poisoning-guard

Free security-baseline rule for Claude Code, Codex, and Cursor: treats MCP tool descriptions as untrusted input (OWASP MCP Top 10 MCP03,…

horkimhab/cve-2026-67276

Educational proof-of-concept for CVE-2026-67276, targeting MikroTik RouterOS vulnerabilities. Includes setup scripts and references for authorized…

pvharmo2/gha-lab-8aba6b05dc

Security-research lab reproducing CVE-2026-45132 (pwn request via pull_request_target chart-name injection in generate-schema.yaml) — snapshot of…

0xblackash/cve-2026-58138

Defensive security research repository detailing CVE-2026-58138, an unauthenticated RCE in Conductor via GraalVM. Provides technical analysis,…

pvharmo2/gha-lab-360f77d0d4

Reproduces CVE-2026-39866, a workflow_dispatch input template injection in a GitHub Actions workflow, using a pinned snapshot of the vulnerable…

pypa/advisory-database

Community-owned database of security advisories for Python packages on PyPI, providing structured vulnerability data in OSV format for integration…

0xblackash/cve-2026-6471

Non-destructive PostgreSQL vulnerability checker for CVE-2026-6471. Audits server version and REPLICATION privileges to identify exposure to logical…

sohanbhowmik/cyberthreat_dbsproject

Structured threat intelligence dataset for tracking CVE vulnerabilities with CVSS scores, KEV status, and publication dates.

kismetwireless/kismet-docs

Documentation repository for Kismet, a wireless network detector, sniffer, and intrusion detection system. Includes guides, configuration references,…

caycon/cve-advisories

Curated collection of CVE advisories and vulnerability information for security research and reference.