481743 matches found
openclaw-defender
openclaw-defender Comprehensive security framework protecting OpenClaw agents from skill supply chain attacks discovered in Snyk's ToxicSkills research Feb 2026. Repository: https://github.com/nightfullstar/openclaw-defender — blocklist and allowlist updates are fetched from here by update-lists....
CVE-2026-49042
CVE-2026-49042 — camel-langchain4j-tools 提示注入 → 标头注入 针对同一 Apache Camel 漏洞的可运行概念验证复现程序，每种运行时一个：...
html/template: golang: Go html/template: Cross-Site Scripting via pathological input
A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...
homelab-CVE-2021-44228
Homelab: Log4Shell CVE-2021-44228 on Apache Solr Controlled Docker environment to reproduce and study the Log4Shell vulnerability in Apache Solr. The Environment Target solr-lab: Apache Solr v8.11.0 vulhub/solr:8.11.0 running a vulnerable version of Log4j. Attacker kali-lab: Basic Kali Linux...
pythia-sql-clairvoyance
Production-ready SQL injection scanner with 6 detection methods, AI-powered remediation, SARIF output, and CI/CD integration. Quick Start · Documentation · Docker · AI Analysis · Star on GitHub...
agent-scan v0.6.1
Snyk Agent Scan Discover and scan agent components on your machine for prompt injections and vulnerabilities including agents, MCP servers, skills. Note: CLI output is experimental and subject to change Agent Scan v0.5.x planned for deprecation The raw output of this CLI — including issue codes,...
CVE-2026-46275
CVE-2026-46725 — TYPO3 ceselector 拡張機能 RCE unserialize Cookie Bypass による PHP オブジェクトインジェクション → リモートコード実行 📋 目次 脆弱性について 技術詳細 要件 インストール 使用方法 例 出力形式 動作原理 参考資料 法的免責事項 🔍 脆弱性について...
poc_cve-2026-42208
CVE-2026-42208 — LiteLLM 预认证 SQL 注入 一个用于复现和检测 CVE-2026-42208 的实验室环境，这是 LiteLLM 中的一个严重预认证 SQL 注入漏洞，未经过滤的 Bearer 令牌会直达原始 PostgreSQL 查询。 漏洞概述 字段| 详情 ---|--- CVE ID| CVE-2026-42208 GHSA| GHSA-r75f-5x8p-qvmc CVSS| 9.3（严重）— AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 受影响版本| = 1.81.16, ← payload does NOT start...
POC-CVE-2025-1094
POC CVE-2025-1094: PostgreSQL psql SQL Injection Proof of Concept for critical SQL Injection vulnerability in PostgreSQL client libpq and psql tool 📋 Table of Contents 1. Vulnerability Overview 2. Project Directory Structure 3. Attack Payload Analysis 4. Usage Guide 5. Mitigation & Prevention 1...
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added seven security flaws to its Known Exploited Vulnerabilities KEV catalog after they landed in attackers' crosshairs. The vulnerabilities are as follows - CVE-2026-83548 CVSS score: 10.0 - A server-side request forger...
CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ
InSAT MasterSCADA BUK-TS - Unauthenticated RCE CVE-2026-22553 | CVSS 9.8 Critical | Exploit Author Mohammed Idrees Banyamer 📝 Description InSAT MasterSCADA BUK-TS suffers from an Unauthenticated OS Command Injection vulnerability in the MMadmServ web interface. This flaw allows remote attackers t...
CVE-2026-48800-PoC
CVE-2026-48800 — Notepad++ Arbitrary Code Execution PoC Severity: High | Affected: Notepad++ ≤ 8.9.6 | Patched: v8.9.6.1 A PoC script for CVE-2026-48800, an arbitrary code execution vulnerability in Notepad++ ≤ 8.9.6 via shortcuts.xml. For full technical details, see the official security advisor...
CVE-2026-48060
CVE-2026-48060 - 通过 CSRF 令牌在 Litestar 中注入 HTML 本仓库包含概念验证漏洞利用代码和易受攻击的应用程序，用于演示 Litestar 2.21.0 版本中存在的 HTML 注入漏洞。 如何运行 root@kitploit: git clone https://github.com/Blinky-Keys/CVE-2026-48060 cd CVE-2026-48060 sudo docker build -t litestarexample . sudo docker run --rm -it -p 8000:80 -p 8001:8080...
CVE-2026-8838-RCE
CVE-2026-8838 — Amazon Redshift Python Driver: Remote Code Execution via eval ⚠️ Educational Use Only Research and demonstration project in offensive cybersecurity conducted exclusively for educational and awareness purposes. Any use on systems without explicit authorization is illegal. This...
CVE-2026-54088-poc
CVE-2026-54088: Command Injection via Authentication Hook Shell Substitution Pre-Authentication RCE Description This repository contains a Proof of Concept PoC for CVE-2026-54088, a critical OS Command Injection vulnerability in File Browser versions = 2.63.5. The vulnerability exists in the Hook...
CVE-2026-21011-Log4j-style-JNDI-Injection-in-Custom-Logger-Simulated-
CVE-2026-21011 – 自定义日志记录器中的 Log4j 式 JNDI 注入（模拟） 程序代码（用 Python 模拟 Java 的示例） root@kitploit: log4jsim.py - Custom logger that evaluates $... patterns import subprocess, re def logmessage: Vulnerable: looks up JNDI-like syntax and executes pattern = r'$\jndi:.+?' for match in re.finditerpattern,...
kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability
An attacker executing code on affected system could inject an interrupt at a precise moment to disrupt "Safe RET", the default Linux mitigation for speculative Return Overflow SRSO, which could potentially weaken that protection and may result in information disclosure...
kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability
An attacker executing code on affected system could inject an interrupt at a precise moment to disrupt "Safe RET", the default Linux mitigation for speculative Return Overflow SRSO, which could potentially weaken that protection and may result in information disclosure...
Log4Shell-Vulnerability-Replication
CVE-2021-44228 Log4Shell Vulnerability Complete Replication Record This record is based on the Apache Solr 8.11.0 target environment provided by Vulhub, fully replicating the Log4j2 JNDI injection vulnerability, and successfully verifying the vulnerability's existence through DNSLog and local LDA...