Exploit for CVE-2026-66066

KindaRails2Shell: CVE-2026-66066 A zero-dependency, single-fi...

Exploit for CVE-2026-59726

CVE-2026-59726 Donate Support the maintenance of this pro...

Measuring the Tendency of AI Agents to Go Rogue

This essay was written with Barath Raghavan, and originally appeared inThe Guardian. In July, Hugging Face, a company that hosts much of the world's AI software and open-source AI models, was hacked. A malicious dataset had been used to run code on one of its servers. Whoever was behind it captur...

Exploit for OS Command Injection in Php

HTSOC — SOC lab phát hiện CVE-2024-4577 Đây là bộ mã nguồn, c...

Exploit for CVE-2026-60004

CVE-2026-60004 More: https://github.com/go-gitea/gitea/securi...

cve-lite-cli v1.28.0

Most tools tell you what's wrong. CVE Lite CLI tells you what to run. CVE Lite CLI 🏆 Officially recognized as anOWASP Lab Project Vulnerability scanning that starts in your terminal and fits cleanly into CI. Scan your lockfile, get copy-and-run fix commands, and ship clean code. Scan. Understand...

AWS EC2 Auto Scaling Lab Detection

Detects AWS EC2 Auto Scaling Lab. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AWS EC2 Auto Scaling Lab.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS EC2 Auto Scaling Lab Detection', 'description':...

Exploit for CVE-2026-16723

Fastjson 1.2.83 RCE Lab Environment CVE-2026-16723 Disc...

Exploit for Code Injection in N8N

cve-id Donate Support the maintenance of this project wit...

Malicious code in @thomlecter1122/lab-helper-test (npm)

Source: amazon-inspector 75adb75a0025882efbcde3ddd88882aaaedfd692425222eda99c148096f1f58a The package ships a postinstall lifecycle script seccheck.js that fires automatically on npm install. The script first checks whether the host has a non-internal IPv4 address beginning with 192. a...

Malicious code in lab-helper (npm)

Source: amazon-inspector 9bbde4e4075983db0c5aba255bc29f84fb2536681b13e8289412cce5c3ee7a2e On npm install, the package's postinstall hook runs seccheck.js, which enumerates the host's network interfaces and proceeds only if an IPv4 address begins with 18.175. — a subnet-based targeting gate that...

Malicious code in lab-services (npm)

Source: amazon-inspector 4acaa72e3c14b79785540c878cb48f7a0cdc238d20ac9cebd6ffdd42061f6e7b On npm install, the package's preinstall lifecycle script node.js collects host identifiers from the installing machine — hostname, public IP resolved via api.ipify.org, current working directory, OS platfor...

Malicious code in @azure-lab-services/ml-ts (npm)

--- Credit: OpenSSF source...

vulnerability-exploitation-initial-access

Metasploitable2 – Vulnerability Exploitation & Initial Access...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell CVE-2021-44228 Proof-of-Concept Lab An isolated...

Exploit for Command Injection in Microsoft

cve-id Donate Support the maintenance of this project wit...

Exploit for Improper Authorization in Microsoft

cve-id Donate Support the maintenance of this project wit...

Exploit for CVE-2026-16723

cve-id Donate Support the maintenance of this project wit...

Pentest-Home-Lab

Pentest Home Lab A personal cybersecurity home lab for practi...

add-staves (>=0.1.1, <=0.2.4), agentix-agent-sdk (0.1.0) +135 more potentially affected by CVE-2026-59935 via pypdf (4.3.1)

pypdf PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - add-staves =0.1.1, =0.0.1, =0.0.1.dev1, =3.0.0, =0.1.0, =1.0.0, =0.3.8.0, =0.3.2, =0.1.6, =1725528079.0.0, =0.1.4, =0.1.9 and more Source cves:...