4466 matches found
CVE-2026-40171
CVE-2026-40171 affects Jupyter components prior to fixes: Notebook 7.0.0โ7.5.5, JupyterLab up to 4.5.6, and related help extensions (@jupyter-notebook/help-extension, @jupyterlab/help-extension). The root cause is a stored XSS in the CommandLinker used by the Help Extension, which can be chained ...
CVE-2026-40171
In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with...
CVE-2026-40171 Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker
In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with...
CVE-2026-40171 Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker
In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with...
Exploit for SQL Injection in Progress Moveit_Cloud
CVE-2023-34362 MOVEit Transfer Vulnerability Analysis Proj...
Jupyterๅคๆฌพไบงๅ ่ทจ็ซ่ๆฌๆผๆด
Jupyter Notebook is an open-source web application developed by Project Jupyter, designed for creating and sharing code along with explanatory text documents. JupyterLab is another open-source project developed by JupyterLab, offering an extensible environment for interactive and reproducible...
eLabFTW ๅฎๅ จๆผๆด
eLabFTW is an open-source experimental data hosting platform developed by eLabFTW. This platform runs on the Linux system and supports the storage of various types of objects. Versions of eLabFTW 5.4.1 and earlier contain security vulnerabilities. These vulnerabilities stem from the login process...
Exploit for Heap-based Buffer Overflow in Postgresql
CVE-2026-2005 โ PostgreSQL pgcrypto Heap Overflow Lab A self-...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
CVE-2026-39987 โ marimo Pre-Auth Terminal WebSocket RCE Lab...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
CVE-2026-39987 โ marimo Pre-Auth Terminal WebSocket RCE Lab...
Exploit for Out-of-bounds Write in Zeromq Libzmq
CVE-2019-13132 โ libzmq CURVE INITIATE stack overflow โ RCE la...
dvwa-xss
Cross-Site Scripting XSS Attack & Analysis โ DVWA A hands-o...
ethical-hacking-portfolio
Ethical Hacking Portfolio - CS4069 | Spring 2026 Course:...
cve-deep-dive
Report Bug ยท Request Feature Table of Contents a...
Metasploitable2-VAPT
Internal Host VAPT Assessment | Kali Linux + Metasploitable2...
homelab-security
Cybersecurity Home Lab A personal home lab built for hands-on...
VAPT-Practice-Labs
๐ VAPT Practice Labs This repository contains my hands-on Vul...
CVE-2026-7468
A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has bee...
PT-2026-36305
Name of the Vulnerable Software and Affected Versions Jupyter Notebook versions prior to 7.5.6 JupyterLab versions prior to 4.5.7 Description A stored Cross-Site Scripting XSS issue allows attackers to steal authentication tokens from users who open malicious notebook files and interact with...
PT-2026-36032
A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has bee...