Knowledge-Base
slowmist/knowledge-baseCurated knowledge base of blockchain security research, audit reports, guides, and translations covering smart contracts, cryptography, and AI…
ai-securitycryptographycurated-resources+7
4.6k
slowmist/knowledge-baseCurated knowledge base of blockchain security research, audit reports, guides, and translations covering smart contracts, cryptography, and AI…
rubysec/ruby-advisory-dbCommunity-maintained database of security advisories for Ruby gems and runtimes, providing structured CVE/GHSA data with patched versions for…
califio/publicationsCurated collection of security research papers, CVE exploit writeups, reverse-engineering analyses of Apple internals, and commissioned security…
0xnazgul/blockchain-security-audit-listA list of Blockchain Security audit companies, solo auditors and location of public audits.
owasp/the-agents-epistemic-baggageAn audit-oriented risk model for how agent-generated inferences can change epistemic status, gain operational authority, and influence later…
agentsid-dev/agentsid-scannerSecurity scanner for MCP servers. Grades auth, permissions, injection risks, and tool safety. The Lighthouse of agent security.
syntaxmethod/cve-2026-42978-poc-researchCVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free & Race Condition PoC research, diagnostic scanner, and security audit module…
azqzazq1/lidLID — Linux Integrity Drift: Bypassing AppArmor via eBPF pathname rewriting. Pre-LSM syscall argument manipulation with zero audit footprint. "Linux…
dinosn/apache-activemq-rce-researchApache ActiveMQ Classic RCE research: CVE-2026-34197 / CVE-2026-42588 bypass chain + hardened-6.2.6 audit findings + Crowdfense comparison
xs2024770/cve-2024-57521-ruoyi-sqliStatic code audit of CVE-2024-57521, an authenticated SQL injection in RuoYi-Vue's generator module, with source-to-sink analysis and a %0b filter…
vardhan0257/upb-any-recursion-auditAudit harness testing whether the CVE-2026-0994 Any-unwrapping recursion bug class affects upb's C core in Ruby and PHP protobuf bindings, with…
kelnor/cve-2026-3494_verficationReproduces and analyzes CVE-2026-3494, an audit logging bypass in MariaDB server_audit plugin, using Docker-based multi-version testing to compare…
zerodayevil/cve-2026-54121-certighostProof-of-concept module for CVE-2026-54121 (Certighost), exploiting AD CS enrollment validation via rogue LDAP/SMB listeners to impersonate a Domain…
xuehuolll/cve-2026-109618-109619-auditCVE-2026-109618/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.
zerodayevil/cve-2026-20817Repository dedicated to CVE-2026-20817, providing vulnerability details and exploitation material for this specific security flaw.
zerodayevil/cve-2026-20805-pocProof-of-concept exploit code for CVE-2026-20805, demonstrating the vulnerability for security research and validation.
zerodayevil/cve-2026-41651Repository dedicated to CVE-2026-41651, containing vulnerability-specific information and analysis for this single security issue.
cgrtml/reasongateExplainable security gate for LLM apps — blocks prompt injection with an auditable reason for every decision.