PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
PDF extraction that audits its own output — and certifies any other extractor's, catching pages they silently dropped. Verify signed manifests offline: free, MIT, no account. 0.903 on opendataloader-bench, #2 of 8 engines. 7-tool MCP server.
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
Markov-chains for linguistically-correct password cracking
Python SCALE-Codec
A little Python utility that lets you monitor Bitcoin addresses through Blockchain Websocket API and perform custom callbacks.
Metadata & configs for client apps in Polkadot & Kusama ecosystem
Python package for inverse kinematic calculations of hybrid serial parallel robots
- python
- robotics
- kinematics
- inverse-kinematics
💬 Trace citation chains for any concept across research papers and render them as an interactive graph.
- academic-research
- bibliography
- citation-graph
- cli
🚨 PANIC for Polkadot
Enterprise-grade platform to generate and execute Cypress, Playwright, WebdriverIO, and Appium end-to-end tests from natural language requirements. (Appium is experimental and requires external mobile infrastructure.)
AlgoNim, the first Algorand game
Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.
Claim the 👑 Crown and the 🪄 Sceptre of Algorand Realm
- algorand
- algorand-atomic-transfer
- algorand-smart-contract
- algorand-standard-assets
The application allows you to trade on the outcomes of events, and follow the odds to garner accurate insights about the future. Users buy or sell Voting Shares, which can be redeemed for 1 unit of the stable asset if the outcome is resolved as correct, and become worthless if it’s incorrect.
The Teal Inspector for lovely Algorand Developers
- algorand
- algorand-blockchain
- algorand-smart-contract
- algorand-teal
Debt Algorand Standard Application
Python analytics framework for Corda vault and node data
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
ETL scripts for EOS.
MicroPython driver for P9813 chainable RGB LEDs
An example connecting the Litecoin blockchain to the Waves platform.
A lightweight Python package for teaching computational methods through art history. Extract and analyze artist-specific works from WikiArt with built-in visualizations. Designed for digital humanities and computational design courses. Features genre/style analysis, matplotlib integration, and pedagogical clarity over algorithmic complexity.