Exploit for CVE-2026-53805

cve-id ⚡ Simple Usage Use this project only in safe and...

PT-2026-59056

An Improper Input Validation vulnerability exists in Apache Superset that allows an authenticated user with SQLLab access to bypass the read-only verification check when using a PostgreSQL database connection. While the system effectively blocks standard Data Manipulation Language DML statements...

PT-2026-59192

Impact Users of JupyterLab who click on a malicious link may get their Authorization and XSRFToken tokens exposed to a third party when running an older jupyter-server version. Patches JupyterLab 4.1.0b2, 4.0.11, and 3.6.7 were patched. Workarounds No workaround has been identified, however users...

PT-2026-57819

Name of the Vulnerable Software and Affected Versions Skillable affected versions not specified Description A flaw in the lab platform allows for the forgery of a client-supplied identifier to bypass per-user lab launch limits. By modifying the userId variable provided by the browser, an attacker...

Exploit for OS Command Injection in Vsftpd_Project Vsftpd

Detection Engineering & Vulnerability Research - CVE-2011-2523...

wp-cve-exploits

wp-cve-exploits Nuclei detection templates and validated PoC...

cve-reverser

cve-reverser Reverse publicly disclosed WordPress plugin CV...

Exploit for Out-of-bounds Write in Ivanti Connect_Secure

CVE-2025-22457 Simulation: Stack-Based Buffer Overflow Analizi...

CVE-2026-59831

GitHub CLI gh is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopbac...

Exploit for Authorization Bypass Through User-Controlled Key in Liferay Digital_Experience_Platform

CVE-2025-OpenSSL-RCE Exploit What is this CVE? This is a b...

POC

OWASP Vulnerability Learning Lab Spring Boot 3 ⚠️ WARNIN...

windows7-eternalblue-lab

MS17-010 EternalBlue Exploitation Lab Hands-on penetration t...

nmap-enumeration-lab

Network Scanning & Host Enumeration with Nmap Host discovery,...

jaeger-lab-to-nwb (0.1.1), xircuits (1.3.0) potentially affected by CVE-2025-59842 via jupyterlab (3.3.2)

jupyterlab PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - jaeger-lab-to-nwb 0.1.1 - xircuits 1.3.0 Source cves: CVE-2025-59842 Source advisory: OSV:PYSEC-2026-1482...

PYSEC-2026-1178 Apache Superset has bypass of `DISALLOWED_SQL_FUNCTIONS` that allows execution of blocked SQL functions

A bypass of the DISALLOWEDSQLFUNCTIONS security feature in Apache Superset allows for the execution of blocked SQL functions. An attacker can use a special inline block to circumvent the denylist. This allows a user with SQL Lab access to execute functions that were intended to be disabled, leadi...

PYSEC-2026-1481 HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

Impact The vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user...

HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

ImpactThe vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature.A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user...

Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access

Improper Authorization vulnerability in Apache Superset. On Postgres analytic databases an attacker with SQLLab access cancraft a specially designed SQL DML statementthat is Incorrectly identified as a read-only query, enabling its execution. Non postgres analytics database connections and postgr...

django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) potentially affected by CVE-2024-28219 via pillow (2.4.0)

pillow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-badgify-lab 0.1.5 - django-oscar =1.0.0, =1.0.2 Source cves: CVE-2024-28219 Source advisory: OSV:PYSEC-2026-1793...

rubin-jupyter-utils-lab (>=0.10.0, <=0.13.0), swannotificationsservice (0.1.0) potentially affected by CVE-2024-28233 via jupyterhub (1.5.1)

jupyterhub PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - rubin-jupyter-utils-lab =0.10.0, =0.13.0 - swannotificationsservice 0.1.0 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...