17 matches found
CVE-2026-21858-n8n-FullChain
🛡️ AI Security Tool Module n8n Full Chain CVE-2026-21858 + CVE-2025-68613 — "Ni8mare" Official Security Audit Module for AI Security Tool Ecosystem...
CVE-2026-21858
CVE-2026-21858 + CVE-2025-68613 - n8n Full Chain Unauthenticated Arbitrary File Read → Admin Token Forge → Sandbox Bypass → RCE...
DSL-2750U-Full-chain
firmware-analysis 1. DSL-2750U 漏洞 : tftp 服务器配置错误 CVE-2021-3707 命令注入漏洞 CVE-2021-3708...
CVE-2025-2783
Chromium CVE-2025-2783：沙盒逃逸与全链远程代码执行利用 本仓库包含了 CVE-2025-2783 的完整利用链实现。该漏洞存在于 Chromium 的 Ipcz 通信层，允许攻击者从受限的渲染器进程中实现沙盒逃逸和任意代码执行。该利用支持 134.0.6998.177 及之前的版本。 https://github.com/user-attachments/assets/a3e2bf34-739c-4db7-9101-0f4d48987ad0 1. 项目结构 src/ ：核心利用实现。包含针对 CVE-2025-2783 的 Ipcz 劫持逻辑、V8...
darksword-Exploit
🗡️ DarkSword — iOS Full-Chain Exploit Analysis Reference:...
Exploit for CVE-2024-11114
Chromium Exploit Development Toolkit A toolkit for weaponizing...
PT-2026-23506
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.10 Description A time-of-check-time-of-use TOCTOU issue exists in the validateScriptFileForShellBleed function. A TOCTOU issue is a software bug where a system checks a condition such as a security credential...
📄 n8n 2.0.0-rc.4 Remote Command Execution
n8n version 2.0.0-rc.4 PHP port of a research exploit that chains together multiple vulnerabilities including arbitrary file read and sandbox escape in order to achieve remote command execution...
Exploit for Cross-site Scripting in Snipeitapp Snipe-It
PoC for CVE-2025-59712 and CVE-2025-59713 This PoC provides a...
PT-2024-27470 · Collabora · Collabora Online
Name of the Vulnerable Software and Affected Versions: Collabora Online versions prior to 22.05.23.1 Collabora Online versions prior to 23.05.14.1 Collabora Online versions prior to 24.04.4.3 Description: In affected versions of Collabora Online, a collaborative online office suite based on...
Vulnerabilities fixed in OpenSSL
The developers of OpenSSL have fixed several vulnerabilities fixed. A malicious party could exploit the vulnerabilities to cause a denial-of-service by offering manipulated certificates causing the OpenSSL system to crash. Under specially prepared circumstances, where the malicious party has...
Mozilla FireFox (Windows 10 x64) - Full Chain Client Side Attack Exploit
// Axel '0vercl0k' Souchet - November 19 2019 // EDB Note: Download https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/47752.zip // 0:000 ? xul!sAutomationPrefIsSet - xul // Evaluate expression: 85724947 = 00000000051c0f13 const XulsAutomationPrefIsSet = 0x051c0f13...
Mozilla FireFox (Windows 10 x64) - Full Chain Client Side Attack
// Axel '0vercl0k' Souchet - November 19 2019 // EDB Note: Download https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/47752.zip // 0:000 ? xul!sAutomationPrefIsSet - xul // Evaluate expression: 85724947 = 00000000051c0f13 const XulsAutomationPrefIsSet = 0x051c0f13n;...
Mozilla FireFox (Windows 10 x64) - Full Chain Client Side Attack
Mozilla FireFox Windows 10 x64 - Full Chain Client Side Attack // Axel '0vercl0k' Souchet - November 19 2019 // EDB Note: Download https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/47752.zip // 0:000 ? xul!sAutomationPrefIsSet - xul // Evaluate expression: 8572494...
Google offers up to $1.5 million bounty for remotely hacking Titan M chip
With its latest announcement to increase bug bounty rewards for finding and reporting critical vulnerabilities in the Android operating system, Google yesterday set up a new challenging level for hackers that could let them win a bounty of up to $1.5 million. Starting today, Google will pay $1...
Exploit Reseller Offering Up To $2.5 Million For Android Zero-Days
Well, there's some good news for hackers and vulnerability hunters, though terrible news for Google, Android device manufacturers, and their billions of users worldwide. The zero-day buying and selling industry has recently taken a shift towards Android operating system, offering up to $2.5 milli...
