CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
Repository Index
47,133 repositories indexed
481–504 of 1,488 · Most stars
A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.
A production-ready C++ vector graphics engine supporting SVG and Lottie formats, featuring advanced rendering backends such as WebGPU for high-performance graphics.
- animation
- 2d-graphics
- embedded
- graphics-library
Local AI song generator with an editable score — YuE2 on your GPU: full songs with vocals, sheet music, covers, exact replay. Native Windows app, no Python, installer with auto-update.
- abc-notation
- ai-music
- covers
- cuda
Model Predictive Contouring Controller (MPCC) for Autonomous Racing
Linear algebra, eigenvalues, FFT, Bessel, elliptic, orthogonal polys, geometry, NURBS, numerical quadrature, 3D transfinite interpolation, random numbers, Mersenne twister, probability distributions, optimisation, differential equations.
- scientific-computing
- linear-algebra
- differential-equations
- sparse-systems
An authentication system generator for Rails applications.
- rails
- ruby
- authentication
- generator
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
✨ Open Source, Privacy-First and Simple Analytics for Mobile, Desktop and Web Apps
Analyze the security of any domain by finding all the information possible. Made in python.
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
- awesome-list
- binary-analysis
- ghidra
- malware-analysis
Erlang web MVC, now featuring Comet
- framework
- web-framework
- erlang
A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
- threat-modeling
- practical-devsecops
- security-review
- devsecops-university
PHP Captcha library
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
Checklist of security precautions for Ruby on Rails applications.
media streaming framework and teleconferencing system written in rust
- rust
- rust-lang
- zoom
- actix-web
A curated list of awesome Security Hardening techniques for Windows.
Comma runs software without installing it. [maintainers=@Artturin,@burke,@DavHau]
Database anonymization and test data management
- golang
- obfuscation
- postgresql
- security
Review, import & export styles in Sketch.
Security-focused static analysis for the Phoenix Framework
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
Vulkan/CUDA/HIP/OpenCL/Level Zero/Metal Fast Fourier Transform library
- vulkan
- fft
- convolution
- r2c