44734 matches found
exploit
Exploit Оффенсивный хакерский инструмент Начало работы Это хакерский инструмент или программа, закодированная и созданная для помощи хакеру во взломе и выполнении эксплойтов. По вопросам Telegram: https://t.me/bitgodhack Email: [email protected] Требования к установке на любом дистрибутиве...
CLSA-2026-1788426720 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 2 CVEs. Fixed in 6.0.13-tuxcare.3...
CLSA-2026-1788426505 TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 4 CVEs. Fixed in 6.0.11-tuxcare.2...
CLSA-2026-1788426489 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 3 CVEs. Fixed in 6.0.12-tuxcare.2...
CLEANSTART-2026-JY55743 Netty is an asynchronous, event-driven network application framework
Multiple security vulnerabilities affect the apache-zookeeper package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...
meterpreter-exploit-reverse-shell-on-remote-vm
Meterpreter Reverse Shell Lab VM remota ⚠️ AVISO — SOLO...
CTF-Magic
CTF-Magic A GUI-based CTF exploitation framework for Debian...
[SECURITY] Fedora 44 Update: mingw-gstreamer1-1.28.6-1.fc44
GStreamer is a streaming-media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plug-in-based architecture means that new data types...
CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit — Updated!
🔐 ReactRCE-Scanner CVE-2025-55182 — Advanced React Server Components RCE Exploit & Assessment Framework 📑 Table of Contents Legal Disclaimer & Ethical Notice Overview Key Capabilities Quick Start Guide Architecture & Feature Deep Dive Configuration Reference Automated Test Suite Remediation &...
[SECURITY] Fedora 43 Update: gvfs-1.58.4-4.fc43
The gvfs package provides backend implementations for the gio framework in GLib. It includes ftp, sftp, cifs...
PT-2026-85061
Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In dfba919e218e20d52db9f7b2e8d292d45a46c91b and prior, normal beneficiary payout paths in StreamingEscrow preserve depositAmount...
CVE-2026-49455: Cross-Site Request Forgery (CSRF)
Waku is the minimal React framework. Prior to version 1.0.0-beta.1, Waku's RSC request dispatcher invokes server actions without validating the request's Origin or Sec-Fetch-Site header. A cross-origin web attacker can therefore cause a victim browser to issue an authenticated POST to a registere...
Shifting from Injection to Interaction: Rethinking Web Security in the Age of LLMs and Beyond
Large language models LLMs are becoming integral to web applications and browser agents, transforming online interactions while introducing new attack vectors and reshaping longstanding web vulnerabilities. Classical threats such as cross-site scripting XSS can be amplified through LLM-mediated...
CVE-2026-85012: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command CWE-78 in the blueprint resynthesis framework in Amazon Web Services codecatalyst-blueprints before 0.3.156 might allow a user with permission to commit to a repository in the project to execute arbitrary commands in the blueprint...
The vulnerability of the Business Connectivity Services (BCS) framework in Microsoft SharePoint Server and SharePoint Enterprise Server allows a perpetrator to execute arbitrary code.
The vulnerability of the Business Connectivity Services BCS framework in Microsoft SharePoint Server and SharePoint Enterprise Server stems from the insecure creation of .NET types through insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary...
Next.js Framework 13.4 < 15.5.24 / 16.x < 16.3.3 RCE (Windows)
The Next.js Framework on the remote host is affected by a remote code execution vulnerability: - A vulnerability in applications using both the Pages Router and App Router without Cache Components can lead to unauthenticated remote code execution when the Next.js server uses a Windows filesystem...
EUVD-2026-69647
Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default...
joro v1.12.0
Joro A web exploitation framework for offensive security professionals. Intercepting proxy, blind vulnerability detection, web shell generation, C2 integration, and collaboration tools in a single binary with an embedded web UI. Warning: This tool is intended for authorized penetration testing an...