4466 matches found
Bug-Bounty-Practice-lab
Syntex Solutions — Vulnerable Lab ⚠️ WARNING — FOR AUTHOR...
PT-2026-50511
Name of the Vulnerable Software and Affected Versions NVIDIA Spatial Intelligence Lab's SIL GEN3C affected versions not specified Description The inference API server contains an unauthenticated remote code execution flaw. The endpoints '/request-inference' and '/seed-model' deserialize raw HTTP...
Malicious code in @thomlecter1122/lab-helper-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75adb75a0025882efbcde3ddd88882aaaedfd692425222eda99c148096f1f58a The package ships a postinstall lifecycle script seccheck.js that fires automatically on npm install. The script first checks whether the host has a...
The-Full-Attack-Chain
⚔️ The Full Attack Chain — Capstone Red Team Engagement Int...
CVE-2026-44168
creationtimestamp| type| source ---|---|--- 2026-06-10 04:57:15+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mnvwdsrfzk2z 2026-06-12 20:06:55+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mo4k43sgrd2h 2026-06-14 01:01:01+00:00| seen|...
CVE-2026-44170
creationtimestamp| type| source ---|---|--- 2026-06-10 04:57:15+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mnvwdsrfzk2z 2026-06-16 19:31:22+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mogjyiuqqy2y 2026-06-16 19:35:18+00:00| seen|...
cve-research
CVE Research Personal repository for CVE analysis, proof-of-c...
MAL-2026-5403 Malicious code in t-invest-mcp-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c186ac158f68845fc995a94d15d44c2b65a521d2619d2850232e58f4a61419 Package is a dependency-confusion squat: package.json sets version 9999.99.99 the canonical max-version trick used to win resolution against any...
poc-lab-pro
poc-lab-pro Recent CVE PoC & reproduction scripts. Focused on...
auto_exploiter
Auto-Exploiter Framework ⚠️ LEGAL DISCLAIMER — Authorised...
Exploit for CVE-2026-7465
CVE-2026-7465 - Spectra Gutenberg Blocks Local Lab Local Dock...
Exploit for Improper Authentication in Wordpress
CVE-2008-1930 Exploitation Documentation Guide Document In...
pentestai
PentestAI Autonomous penetration testing framework for intent...
Metasploit2-pentest
Metasploitable2 Penetration Test Lab Author: Lillian Jone...
CVE-2026-11411 iAI Lab PDF AI App chatpdf.pro getExternalCacheDir path traversal
A security flaw has been discovered in iAI Lab PDF AI App 4.21.0 on Android. Impacted is the function getExternalCacheDir of the component chatpdf.pro. Performing a manipulation of the argument displayname results in path traversal. The attack requires a local approach. The exploit has been...
PT-2026-47151
Name of the Vulnerable Software and Affected Versions iAI Lab PDF AI App version 4.21.0 Description A path traversal issue exists in the getExternalCacheDir function of the chatpdf.pro component. This flaw allows a local attacker to perform path traversal by manipulating the display name variable...
PT-2026-48628
Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea fails to enforce OAuth2 access token scopes when a token is submitted via HTTP Basic authentication instead of a Bearer token. This occurs because the authentication process in...
iAI Lab PDF AI: Podcast, Notes, Slides 路径遍历漏洞
iAI Lab PDF AI: Podcast, Notes, Slides is an artificial intelligence-based PDF document analysis tool developed by iAI Lab. Version 4.21.0 of iAI Lab PDF AI: Podcast, Notes, Slides contains a path traversal vulnerability. This vulnerability arises from improper handling of the displayname paramet...
CVE-2026-7468
A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has bee...