4464 matches found
PYSEC-2026-1160 Apache Superset: Improper validation of SQL statements allows for unauthorized access to data
Improper parsing of nested SQL statements on SQLLab would allow authenticated users to surpass their data authorization scope. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1. Users are recommended to upgrade to version 3.1.1, which fixes the issue...
PYSEC-2026-1706 JupyterLab vulnerable to potential authentication and CSRF tokens leak
Impact Users of JupyterLab who click on a malicious link may get their Authorization and XSRFToken tokens exposed to a third party when running an older jupyter-server version. Patches JupyterLab 4.1.0b2, 4.0.11, and 3.6.7 were patched. Workarounds No workaround has been identified, however users...
PYSEC-2026-1173 Apache Superset - Elevation of Privilege
Overview An attacker with access to the SQL Lab and the abuser and abuserrole tables can elevate his privileges to become administrator. Details On a more general level, diverse tables who are supposed to be only readable can be modified using the WITH … AS and RETURNING keywords. Modification of...
Apache Superset has incorrect authorization check
An Incorrect authorisation check in SQLLab in Apache Superset versions up to and including 2.1.0. This vulnerability allows an authenticated user to query tables that they do not have proper access to within Superset. The vulnerability can be exploited by leveraging a SQL parsing vulnerability...
PYSEC-2026-1166 Apache Superset has incorrect authorization check
An Incorrect authorisation check in SQLLab in Apache Superset versions up to and including 2.1.0. This vulnerability allows an authenticated user to query tables that they do not have proper access to within Superset. The vulnerability can be exploited by leveraging a SQL parsing vulnerability...
Exploit for CVE-2026-53359
cve-id ⚡ Simple Usage Use this project only in safe and...
PT-2026-56256
Name of the Vulnerable Software and Affected Versions FluxInk Color Management Driver versions 1.0.7.2 through 1.0.7.5 Description The Color Management Driver TcnPeripheral64.sys allows a standard user account to achieve local privilege escalation. This is possible through arbitrary physical memo...
lab-security-exploitable
No d...
Exploit for Observable Discrepancy in Intel Atom_C
🛡️ Spectre Variant 2 CVE-2017-5715 — Hardware Vulnerability...
Exploit for Improper Input Validation in Apache Activemq
Apache ActiveMQ Classic — RCE Research Private research archi...
cve-pocs
CVE Proof-of-Concept Collection !GitHub starshttps://img...
Exploit for Improper Authentication in Oracle E-Business_Suite
cve-id ⚡ Simple Usage Use this project only in safe and...
CVE-2026-39118
creationtimestamp| type| source ---|---|--- 2026-06-29 00:06:56+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mpf6y6iejs2j...
TLS1.2_Exploit-Scripts
Breaking TLS 1.2 — Penetration Testing Lab & Exploit Scripts...
Exploit for CVE-2026-46331
cve-id ⚡ Simple Usage Use this project only in safe and...
Exploit for CVE-2026-8461
cve-id ⚡ Simple Usage Use this project only in safe and...
vulnerability-assessment-metasploitable2
Vulnerability Assessment — Metasploitable 2 A end-to-end vuln...
EUVD-2026-37607
Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...
CVE-2026-53805 NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API
NVIDIA Spatial Intelligence Lab's SIL GEN3C contains an unauthenticated remote code execution vulnerability in the inference API server where the /request-inference and /seed-model endpoints deserialize raw HTTP request bodies using Python's pickle.loads without authentication or input validation...
