4464 matches found
Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable
Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files to be altered before analysis software loads them. The vendor's July 31 security bulletin says nearly undetectable changes to .fsa and .hid outputs could occur if...
CVE-2026-67975
CVE-2026-67975 concerns NASA cFS v7.0.1. The issue is an improper access-control flaw in the subscription/stream management mechanism, allowing an attacker to arbitrarily remove low-index subscriptions and add new streams by issuing TO_LAB add/remove subscription commands over the network. The CV...
CVE-2026-67975
Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new streams via sending TOLAB add/remove subscription commands...
CineVault-OWASP-Lab
CineVault Plataforma de streaming web tipo Netflix construida...
Exploit for CVE-2026-66066
KindaRails2Shell: CVE-2026-66066 A zero-dependency, single-fi...
Exploit for Code Injection in N8N
cve-id Donate Support the maintenance of this project wit...
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell CVE-2021-44228 Proof-of-Concept Lab An isolated...
Exploit for Command Injection in Microsoft
cve-id Donate Support the maintenance of this project wit...
Exploit for Improper Authorization in Microsoft
cve-id Donate Support the maintenance of this project wit...
Exploit for CVE-2026-16723
cve-id Donate Support the maintenance of this project wit...
Pentest-Home-Lab
Pentest Home Lab A personal cybersecurity home lab for practi...
Exploit for CVE-2026-64600
cve-id Donate Support the maintenance of this project wit...
GHSA-GX64-GJ6P-PC4C JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab
JupyterLab's image viewer allows for cross-site scripting XSS when a specially-crafted image file is opened through the image viewer and then opened in a new tab. This XSS issue can be used to cause remote code execution RCE on the JupyterLab server. Impact This vulnerability allows for arbitrary...
Incorrect Authorization
Overview jupyterlab is a JupyterLab computational environment. Affected versions of this package are vulnerable to Incorrect Authorization in the enforcement of plugin manager lock rules via direct API requests to /lab/api/plugins. An attacker can circumvent administrative restrictions on enablin...
GHSA-H5V5-8746-G7MM JupyterLab PluginManager lock-rule enforcement bypass
JupyterLab's plugin manager exposes administrator controls intended to prevent users from enabling or disabling selected plugins. Two server-side enforcement gaps let an authenticated user bypass those controls with direct requests to /lab/api/plugins. Impact Users could workaround the plugin...
MAL-2026-10871 Malicious code in @azure-lab-services/ml-ts (npm)
--- -= Per source details. Do not edit below this line.=-...
Exploit for CVE-2026-60137
wp2shell-lab Educational PoC and lab for CVE-2026-63030 + C...
CVE-2026-8297 SQLi in GIS Informatics' GisLab Laboratory Management System
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: fr...
CVE-2026-8297
CVE-2026-8297 describes an SQL injection in GisLab Laboratory Management System by Gis Informatics Engineering Consulting (Gis Informatics). Affected versions: 1.4.03 through 08072026. The issue is a generic SQL injection vulnerability with network attack vector, no user interaction, and no privi...