CVE-2024-48392-PoC

CVE-2024-48392 Exploit Overview This repository contains a proof-of-concept PoC exploit for CVE-2024-48392, an XSS vulnerability discovered in Orangescrum self-hosted as well as the premium version. CVE ID: CVE-2024-48392...

bramble

Bramble Un gestor de contraseñas que mantiene tus secretos en tus propios dispositivos. Sin cuenta, sin servidor que aloje tu bóveda, sin empresa que pueda ser vulnerada y filtrar todo. Tú tienes la bóveda, tú tienes la contraseña, y eso es todo. Bramble funciona donde tú estés: Extensión de...

exocomp

Exocomp Golangに特化したセルフホスト型マルチエージェント環境。 特徴 利潤を追い求める皆さん、そしてビジョナリーの皆さん、注目してください！ 有機生命体はあなたの時間、賃金、そして最悪なことに福利厚生を浪費していませんか？ ならば、今すぐ新しいExocomp適応型修復ユニットで業務をアップグレードしましょう。アルファ宇宙域では最も賢い投資です！ 雇うよりも所有する方が良いのでは？ Exocompは単なるツールではありません...それ以上の存在です！ 監視付きタスクキューの機能 architect、coder、planner、summarizer、tester...

Samuraizer

Samuraizer — Cyber‑Security Knowledge Base Engine NotebookLM on steroids — purpose-built for security researchers. 💡 Why Samuraizer? Every security researcher knows the feeling — you find an interesting GitHub repo, a fresh CVE writeup, a blog post about a new exploitation technique. You forward ...

mailcow-dockerized

mailcow: dockerized - 🐮 + 🐋 = 💕 Want to support mailcow? Please consider a support contract with Servercow to support further development. We support you while you support us. : You can also get a SAL which is a one-time payment with no liabilities or returning fees. Or just spread the word: moo...

WhoAmIMailBot

¿Quién Soy Mail Bot? ¿Qué es? ¿Quién Soy Mail Bot? es un servicio para enmascarar tus correos electrónicos. Está inspirado en Blur, donde puedes crear un alias para tu correo y usarlo para registrarte en aplicaciones. El problema de Blur es que todos los correos pasan por su infraestructura y yo ...

layne

Layne Layne is a self-hosted GitHub App that centralizes security scanning across our repositories. Since we don't use commercial SAST/secrets scanning tools, nor we have access to GitHub Enterprise, it can get hard to maintain different GitHub Actions workflow files across different repositories...

nextssrf

╔══════════════════════════════════════════════════════════════╗ ║ NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF ║ ║ Affected: 13.4.13 → 15.5.15, 16.0.0 → 16.2.4 ║ ║ @mitsec / ynsmroztas — Bug Bounty Tooling ║...

headscale

Tailscale コントロールサーバーのオープンソース、セルフホスト実装です。 Discord サーバー に参加してチャットしましょう。 注意: 常に使用しているリリースバージョンと同じ GitHub タグを選択し、正しい設定例があることを確認してください。main ブランチには未リリースの変更が含まれている可能性があります。安定版と開発版のドキュメントが利用可能です: 安定版のドキュメント 開発版のドキュメント Tailscale とは Tailscale は Wireguard 上に構築されたモダンな VPN です。...

CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass Vulnerability This repository demonstrates the CVE-2025-29927 vulnerability in Next.js where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Vulnerability Details Next.js uses an internal header...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

HaccTheHub

HaccTheHub Plataforma de aprendizaje de ciberseguridad autogestionada de código abierto Acerca del Proyecto HaccTheHub es un proyecto de código abierto que proporciona ciberseguridad El sistema HaccTheHub consta de 3 partes principales: Docker: contiene todas las cajas que crean el entorno en el...

SafeLine

SafeLine - Haga que sus aplicaciones web sean seguras 🏠 Sitio web | 📖 Documentación | 🔍 Demo en vivo | 🙋‍♂️ Discord | 中文版 👋 INTRODUCCIÓN SafeLine es un WAF Firewall de Aplicaciones Web auto-alojado para proteger sus aplicaciones web de ataques y exploits. Un firewall de aplicaciones web ayuda a...

phone-deck

phone-deck Turn a spare Android phone or any device with a browser into a self-hosted control deck and remote desktop for your Linux workstation — over your private Tailscale network, with no third-party apps. It started as "what do I do with an old phone?" and became a control plane for a Hyprla...

gogs

👉 Deploy on DigitalOcean and get $200 in free credits! 🔮 Vision The Gogs /gɑgz/ project aims to build a simple, stable and extensible self-hosted Git service that can be set up in the most painless way. With Go, this can be done with an independent binary distribution across all platforms that Go...

awesome-privacy

A curated list of privacy-respecting apps, software, and providers 🌐 awesome-privacy.xyz CodeBerg Mirror | Submit an Addition | Raw data & API Intro Large data-hungry corporations dominate the digital world but with little, or no respect for your privacy. Migrating to open-source applications wit...

NoEyes

NoEyes 🔒 Secure Terminal Chat End-to-end encrypted group chat, private messages, and file transfer in your terminal. The server is a blind forwarder: it cannot read your messages, does not know your username, does not know the room you are in, and cannot link any two messages to the same person,...

openclaw

OpenClaw 🦞 — Your assistant, on your devices, in your chats OpenClaw is an open-source AI assistant that runs on your own computer and meets you in the channels you already use: Discord, iMessage, Slack, Teams, Telegram, WhatsApp, and 20+ more, plus native apps for macOS, iOS, Android, Windows, a...

lowkey

AWS上のセルフホスト型AIコーディングエージェント — OpenClaw、Claude Code、Codex、Kiro、NemoClaw、Hermes ▶️ YouTubeで完全なウォークスルーを見る 📝 ブログ記事を読む: 「エージェントに独自のAWSアカウントを与えてみた」 TL;DR — Lowkeyをデプロイ: curl -sfL install.lowkey.run | bash bash 、zsh 、AWS CloudShell で動作します。インストーラーは、パック、プロファイル、デプロイ方法を対話形式で案内します。 ワンライナー例（非対話型）:...

send

Send A fork of Mozilla's Firefox Send. Mozilla discontinued Send, this fork is a community effort to keep the project up-to-date and alive. Forked at Mozilla's last publicly hosted version Mozilla & Firefox branding is removed so you can legally self-host Kept compatible with ffsend CLI for Send...