momori777/artemis: aI Girlfriend — Shiki Natsume (四季夏目)
100% Local · Fully Private · Zero API Dependencies All conversations, voice, and images are generated on your own machin...
Continue Reading
Open Source
nateherkai/snagtime: source code for your own scheduling system
Snag a time. Get booked. A free, self-hostable scheduling app for availability, booking links, calendar sync, email notifications, and test payments. What SnagTime does SnagTime gives you the source...
Continue Reading
Open Source
HRuiCcc/music-geshizhuanhuan: self-hosted tool for developers and homelabbers
一个把「加密音乐」变回「普通音乐文件」的跨平台工具。 网易云、QQ 音乐、酷狗、酷我，四个平台的加密格式，拖进去，出来就是标准 mp3/flac。 网页版 + 命令行版，代码从零自研，MIT 协议。 📹 演示视频 ](/uploads/src-1787959671834-0ey8lm.jpg)
Open Source
zack0x01/XSS.pdf-Credential-Harvesting-PDF: pDF-XSS PoC (credential theft via PDF form submission)
A minimal, reusable proof-of-concept showing stored XSS in a PDF viewer, where an uploaded PDF executes JavaScript, prompts for credentials, stores them in hidden form fields, and exfiltrates them via...
Continue Reading
Open Source
ChaoMixian/dsh2shell: unauthenticated RCE PoC for exposed DeepSeek Harness (dsh) web instances
Unauthenticated RCE PoC for exposed DeepSeek Harness (dsh) web instances. !demo Principle: spoofing the Host header unlocks dsh's privileged RPC methods, which lets the PoC register a temporary LLM pr...
Continue Reading
Exploits & CVE
sarabpal-dev/IonStack-S22U: CVE-2026-43499 Exploit Port for Samsung S22 Ultra
sarabpal-dev/IonStack-S22U is a device-specific port of the CVE-2026-43499 exploit tailored for the Samsung Galaxy S22 Ultra (SM-S908W) running Android 15. It adapts kernel primitives and offsets spec...
Continue Reading
Open Source
rafabd1/CVE-2026-75604-poc: cVE-2026-75604 RCE PoC
Python proof of concept for CVE-2026-75604, an unauthenticated remote command execution vulnerability in Windows-hosted Next.js applications that use both the Pages Router and App Router without Cache...
Continue Reading
Open Source
hypnguyen1209/CVE-2026-62911: pre-auth RCE on Microsoft Exchange Server
Pre-auth RCE on Microsoft Exchange Server. No credentials needed. Orange Tsai (DEVCORE) used this at Pwn2Own Berlin 2026 as part of a 3-bug chain. $200,000 prize, full SYSTEM takeover. What it does Ex...
Continue Reading
Open Source
StaticMania/docora: create beautiful docs with Markdown & React components
Create beautiful docs with Markdown & React components. 🚀 Quick Start Local Development Create a new documentation project in seconds: `bash Create a new project npx create-docora my-docs Or...
Continue Reading
Open Source
AIwithhassan/animated-website-sillage: sILLAGE — Maison de Parfum
A scroll-driven cinematic landing page for Sillage Nº 1, a luxury extrait de parfum. As the visitor scrolls, a pre-rendered camera glides in one continuous, uncut shot through the perfume's world — da...
Continue Reading
Open Source
osintbrazuca/SimpleReconDorking: a) a partir do código local (contexto de build = raiz do repositório)
(SRDorking) - Simple Recon - Dorking v1.0.0 Ferramenta de dorking em múltiplos motores de busca para coleta de URLs em operações de OSINT e reconhecimento. Ferramenta de dorking que utiliza multi...
Continue Reading