CVE-2021-29156

CVE-2021-29156 सही तरीके से यह प्रूफ ऑफ कॉन्सेप्ट इसलिए बनाया गया है क्योंकि सार्वजनिक रूप से उपलब्ध अन्य PoC टूटा हुआ है ✨ इंस्टॉल root@kitploit: go install github.com/5amu/CVE-2021-29156@latest संदर्भ https://nvd.nist.gov/vuln/detail/CVE-2021-29156...

waf-checker

एक शक्तिशाली वेब एप्लिकेशन जो जाँचता है कि आपका वेब एप्लिकेशन फ़ायरवॉल WAF सामान्य आक्रमण वैक्टरों से कितनी अच्छी तरह सुरक्षा करता है। → waf-checker.com ← विशेषताएँ सुरक्षा परीक्षण 19+ आक्रमण श्रेणियाँ बिना किसी अतिरिक्त कॉन्फ़िगरेशन के: SQL इंजेक्शन, XSS, पथ ट्रैवर्सल, कमांड इंजेक्शन, SSRF, NoSQ...

CVE-2018-7600.

IGLOO Corp, Won Chi Hyun تقرير تحليل Drupal RCE Drupal RCE CVE-2018-7600 لا تنسى وضع عنوانك في السكريبت! الوصف: توجد ثغرة تنفيذ كود عن بُعد داخل أنظمة فرعية متعددة لـ Drupal 7.x و 8.x. قد تسمح هذه الثغرة للمهاجمين باستغلال عدة نواقل هجوم على موقع Drupal، مما قد يؤدي إلى اختراق الموقع بالكامل. الح...

web-check

Web-Check استخبارات مفتوحة المصدر شاملة وعند الطلب لأي موقع ويب 🌐web-check.xyz بدعم كريم من: Terminal Trove المنزل $HOME لكل شيء في الطرفية | Warp مبني للبرمجة مع وكلاء ذكاء اصطناعي متعددين ---|--- المحتويات حول لقطة الشاشة العرض التوضيحي المباشر المرآة الميزات الاستخدام النشر الخيار1: Netlify...

graphql-threat-matrix

مصفوفة التهديدات لـ GraphQL لماذا graphql-threat-matrix؟ تم بناء graphql-threat-matrix لصيادين الثغرات، وباحثي الأمن، والمخترقين للمساعدة في كشف الثغرات عبر تطبيقات GraphQL المتعددة. قد تؤدي الاختلافات في كيفية تفسير تطبيقات GraphQL وامتثالها لمواصفات GraphQL إلى فجوات أمنية ونواقل هجوم فريدة. من...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

CVE-2018-7600

POC CVE-2018-7600 Drupal RCE CVE-2018-7600 Не забудьте вставить свой адрес в скрипт! Описание: В нескольких подсистемах Drupal 7.x и 8.x существует уязвимость удалённого выполнения кода. Это потенциально позволяет злоумышленникам использовать различные векторы атак на сайт Drupal, что может...

macphish

macphish Office for Mac Macro Payload Generator Attack vectors There are 4 attack vectors available: beacon creds meterpreter meterpreter-grant For the 'creds' method, macphish can generate the Applescript script directly, in case you need to run it from a shell. beacon On execution, this payload...

CVE-2026-67316

axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyless method aliases axios.get, axios.delete, axios.head, axios.options, inherited data is read via...

CVE-2026-7232

The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'parameter name' parameter in all versions up to, and including, 3.9.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

EUVD-2026-46610

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

Hackers Use Fake Claude Code Guide and AI PDFs to Spread AsyncRAT Malware

Hackers are using fake Claude Code guide and AI PDFs to spread AsyncRAT malware via Windows attack using PowerShell and Defender exclusions...

Important: postgresql

Issue Overview: Use of inherently dangerous function PQfn..., resultisint=0, ... in PostgreSQL libpq loexport, loread, lolseek64, and lotell64 functions allows the server superuser to overwrite a client stack buffer with an arbitrarily-large response. Like gets, PQfn..., resultisint=0, ... stores...

Exploit for CVE-2019-5513

VMware Horizon /broker/xml Vulnerability Scanner !Security...

PT-2026-42695

Name of the Vulnerable Software and Affected Versions Plonky3 versions prior to 0.4.3 Plonky3 versions prior to 0.5.3 Description An attacker controlling prover-side observations can craft distinct transcripts that produce identical challenges, breaking the binding property of Fiat-Shamir. This...

Malicious code in ethers-wallet-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beda1480a40189cc8177ace4e3d6fd9773ad81f4cbe5a6c07e3004427846dc8d The package impersonates the legitimate @ethersproject/wallet source files are otherwise verbatim copies, including the internal version string...

Toward Securing AI Agents like Operating Systems

Autonomous agents based on large language models LLMs are rapidly emerging as a general-purpose technology, with recent systems such as OpenClaw extending their capabilities through broad tool use, third-party skills, and deeper integration into user environments. At the same time, these agentic...

SUSE CVE-2014-0598

Directory traversal vulnerability in iPrint in Novell Open Enterprise Server OES 11 SP1 before Maintenance Update 9151 on Linux has unspecified impact and remote attack vectors...

AI Native Asset Intelligence

Modern security environments generate fragmented signals across cloud resources, identities, configurations, and third-party security tools. Although AI-native security assistants improve access to this data, they remain largely reactive: users must ask the right questions and interpret...

On the Security of Research Artifacts

Research artifacts are widely shared to support reproducibility, and artifact evaluation AE has become common at many leading conferences. However, AE mainly checks whether artifacts work as claimed and can be reproduced. It largely overlooks potential security risks. Since these artifacts are...