bom-view

BOM View A simple, static web application for displaying software dependencies from Software Bill of Materials SBOM files. Being a static site, it can be easily hosted on any static web hosting service, such as GitLab Pages, GitHub Pages, or Netlify. Features SBOM Viewer : Displays components fro...

SecureShopProj

SecureShop - Vulnerable E-Commerce Application Security Lab S...

CVE-2022-22536_SAP_Request_Smuggling_Scanner

CVE-2022-22536 SAP Rquest Smuggling Scanner This is a fast, socket-level batch scanner for CVE-2022-22536 , a critical request smuggling vulnerability in SAP Internet Communication Manager ICM and SAP Web Dispatcher. It tests multiple hosts in parallel for protocol desynchronization behavior...

CVE-2026-93372

A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution outside the browser's security sandbox due to a buffer overflow in the Web Graphics Library WebGL component. An attacker can exploit this vulnerability by enticing a user to visit a specially crafted web...

CVE-2026-94585

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On SSO workflow to gain...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication IPC storage callbacks, the service accepts and registers session structures including administrative role...

CVE-2025-70545

PPC Belden ONT 2K05X router Author : Jeyabalaji Affected Product Code Base: PPC 2K05X Router - V1.1.9206L Tested on : Windows 11 CVE : CVE-2025-70545 Description: A stored cross-site scripting XSS vulnerability exists in the web management interface of the PPC Belden ONT 2K05X router running...

CVE-2025-55182_Vulnerable-Application

CVE-2025-55182 Vulnerable Lab Educational testing lab using vulnerable React Server Components to demonstrate security vulnerabilities in modern web frameworks. ⚠️ Important Disclaimer This application is intentionally vulnerable and should ONLY be used for educational purposes in controlled...

CVE-2026-94585

Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform are susceptible to an authentication bypass vulnerability in the web management interface. A network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative ac...

CVE-2026-94585

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On SSO workflow to gain...

EUVD-2026-94731

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On SSO workflow to gain...

CVE-2026-94585

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On SSO workflow to gain...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 are vulnerable to a persistent Denial of Service (DoS) . The flaw exists because the system directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configu...

EUVD-2026-94735

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2026-94584

A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentication requests across a multi-threaded execution pool, this race condition causes PAM modules to process stale or incorrect client IP...

CVE-2026-94575

A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control RBAC checks under specific environmental conditions. Successful exploitation lowers the system authorization mode for t...

CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. The flaw occurs because the service fails to verify the identity or authenticity of the sending process when processing local inter-process communication (...