[GitHub] CVE-Credits
# CVE Credits & Security Advisories Vulnerabilities discovered and responsibly disclosed by [Arkadiusz Marta](https://github.com/arkmarta). --- ### Strapi - [CVE-2025-3930](https://www.cve.org/CVE...
"
Comprehensive hub for vulnerability research, exploit analysis, malware investigation, and AI-powered security insights. Access 5,409+ exploits, real-time threat intelligence, and cutting-edge security tools.
Verified Exploits
Malware Samples
Security Tools
Active Threats
Stay updated with the most recent vulnerability discoveries and exploit research
# CVE Credits & Security Advisories Vulnerabilities discovered and responsibly disclosed by [Arkadiusz Marta](https://github.com/arkmarta). --- ### Strapi - [CVE-2025-3930](https://www.cve.org/CVE...
How good is your vulnerability triage? Score any prioritization method against real CISA KEV + FIRST EPSS data, replayed day by day with no future data. # 🎯 triage-scorecard **How good is your vu...
Security Tracker # Myseq Tracker ## Latest 7 CISA KEV Entries (Total: 1768) *Last update:* ***2026-11-04*** *(added 1 CVE)* | CVE ID | Vendor/Project | Product | Date Added | Known Ransomware ...
Agent Skill for read-only, evidence-backed security audits with honest coverage verdicts. Install: npx skills add shivanathd/evidence-led-security-audit # evidence-led-security-audit [: Edge Copilot Prompt Injection Leads to Cross-Tab Data Exfiltration - PoC & full writeup # CVE-2026-47644 ($12,000): Edge Copilot Prompt Injection Leads to Cross-Tab Data Exf...
Lab PoC for CVE-2026-96889: Next.js Image Optimization SVG typed as AVIF reaches librsvg UAF (RUSTSEC-2026-0305). Unauthenticated RCE on glibc Linux. # CVE-2026-96889 — Image Optimization SVG → l...
CVE-2026-64638 | WordPress < 7.0.3 Pre-Auth Stored XSS → RCE <div align="center"> <img src="img/banner.svg" alt="xss2shell" width="700"> <br><br> [ differential lab: ASAN builds of PHP 8.4.26 vs 8.4.27, one two-request trigger, automatic crash/no-crash verdict. Reproduces the fixed state-corruption bug — not RCE....
Local-only PoC lab for CVE-2026-109618 / CVE-2026-109619 (php2shell) — two critical RCEs in PHP core, session.upload_progress, on by default since 5.4. Docker A/B (vulnerable vs patched builds), rac...
GPT-4 powered threat analysis and code explanation
Real-time feeds from CISA, MITRE ATT&CK
Safe exploit code viewing and analysis
AI-powered security tool suggestions
Visual threat intelligence dashboards
Email and webhook notifications