PT-2025-44056

Name of the Vulnerable Software and Affected Versions eLabFTW versions prior to 5.3.0 Description eLabFTW, an electronic lab notebook, allowed the serving of uploaded SVG files inline. Due to SVG’s support for active content, a malicious SVG file could be uploaded and executed when viewed, leadin...

reflected-xss-poc

Reflected XSS PoC Description: This repository contains...

POC

POC A collection of PoC write...

Eval Injection

Overview isaaclab is an Isaac Lab Affected versions of this package are vulnerable to Eval Injection via the SB3 configuration parsing. An attacker can execute arbitrary code, escalate privileges, cause denial of service, disclose sensitive information, or tamper with data by providing a speciall...

EUVD-2025-34446

NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering...

CVE-2025-23356

NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering...

CVE-2025-23356

NVIDIA Isaac Lab (SB3 configuration parsing) is vulnerable under CVE-2025-23356. Affected component: SB3 configuration parsing in Isaac Lab within the NVIDIA Isaac Lab/Isaac Sim framework. Root cause: improper parsing of SB3 configuration data could allow arbitrary actions if exploited. Potential...

CVE-2025-23356

NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering...

CVE-2025-23356

NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering...

XSS-Scanner-cross-site-scanning-

Basic XSS Lab Local — Flask + CLI Scanner Quick start W...

CVE-2025-23356: Missing Authentication for Critical Function

NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering...

PT-2025-42161

Name of the Vulnerable Software and Affected Versions NVIDIA Isaac Lab affected versions not specified Description NVIDIA Isaac Lab contains a flaw in the SB3 configuration parsing component. Exploitation of this issue could result in code execution, denial of service, escalation of privileges,...

NVIDIA Isaac Lab Access Control Vulnerability

NVIDIA Isaac Lab is a robotics learning framework from NVIDIA. NVIDIA Isaac Lab suffers from an Access Control Error vulnerability that stems from improper SB3 configuration parsing, which could lead to code execution, denial of service, elevation of privilege, information disclosure, or data...

Security Bulletin: NVIDIA Isaac Sim Framework - October 2025

NVIDIA has released an update for the NVIDIA Isaac™ Lab component of NVIDIA Isaac Sim™ framework to address a security issue that might lead to the impacts described in this bulletin. To protect your system, download and install the latest version of Isaac Lab. Go to NVIDIA Product Security...

Web-Application-Security-Testing

Web Application Security Testing — DVWA Lab End-to-end web ap...

CVE-2025-11570

Versions of the package drupal-pattern-lab/unified-twig-extensions from 0.0.0 are vulnerable to Cross-site Scripting XSS due to insufficient filtering of data. Note: This is exploitable only if the code is executed outside of Drupal; the function is intended to be shared between Drupal and Patter...

EUVD-2025-33657

drupal-pattern-lab/unified-twig-extensions is vulnerable to XXS...

GHSA-64MV-9655-37HX drupal-pattern-lab/unified-twig-extensions is vulnerable to XXS

Versions of the package drupal-pattern-lab/unified-twig-extensions from 0.0.0 are vulnerable to Cross-site Scripting XSS due to insufficient filtering of data. Note: This is exploitable only if the code is executed outside of Drupal; the function is intended to be shared between Drupal and Patter...

drupal-pattern-lab/unified-twig-extensions is vulnerable to XXS

Versions of the package drupal-pattern-lab/unified-twig-extensions from 0.0.0 are vulnerable to Cross-site Scripting XSS due to insufficient filtering of data. Note: This is exploitable only if the code is executed outside of Drupal; the function is intended to be shared between Drupal and Patter...

CVE-2025-11570

Versions of the package drupal-pattern-lab/unified-twig-extensions from 0.0.0 are vulnerable to Cross-site Scripting XSS due to insufficient filtering of data. Note: This is exploitable only if the code is executed outside of Drupal; the function is intended to be shared between Drupal and Patter...