5125 matches found
Exploit for Improper Input Validation in Apache Activemq
Apache ActiveMQ Classic — RCE Research Private research archi...
EU Politicians Investigated Pegasus Spyware. Then It Ended Up on One of Their Phones
“It is a direct attack on the rule of law,” says one European Parliament member of the new findings from Citizen Lab...
blackbox-website-pentest-poc
PoC of blacbox pentesting about hand-on lab's...
cve-pocs
CVE Proof-of-Concept Collection !GitHub starshttps://img...
CVE-PoC-Hub
🔬 CVE-PoC-Hub — Curated Proof-of-Concept Exploits Working,...
Exploit for Type Confusion in Google Chrome
CVE-2026-6307: V8 JS-to-Wasm type confusion → RCE on Chrome 14...
stack-buffer-overflow-lab
Stack Buffer Overflow Lab Overview This project demonstrat...
Exploit for Improper Authentication in Oracle E-Business_Suite
cve-id ⚡ Simple Usage Use this project only in safe and...
Exploit for CVE-2026-8037
cve-id ⚡ Simple Usage Use this project only in safe and...
Malware in @cloudways-lab/unified-design-system
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious Package
Overview @cloudways-lab/unified-design-system is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...
django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) potentially affected by CVE-2023-50447 via pillow (2.4.0)
pillow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-badgify-lab 0.1.5 - django-oscar =1.0.0, =1.0.2 Source cves: CVE-2023-50447 Source advisory: OSV:PYSEC-2026-457...
CVE-2026-39118
creationtimestamp| type| source ---|---|--- 2026-06-29 00:06:56+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mpf6y6iejs2j...
IITR_Capstone_RedScope_Project
RedScope Capstone Project Lab-only red-team assessment for we...
TLS1.2_Exploit-Scripts
Breaking TLS 1.2 — Penetration Testing Lab & Exploit Scripts...
Exploit for CVE-2026-46331
cve-id ⚡ Simple Usage Use this project only in safe and...
CVE-2026-6658
A vulnerability in jupyter/nbconvert allows for Cross-site Scripting XSS via unsanitized "text/vnd.mermaid" output in HTML exports. The "datamermaid" block in "share/templates/lab/base.html.j2" renders "text/vnd.mermaid" cell output directly into HTML without escaping, enabling attackers to injec...
CVE-2026-6658: Improper Neutralization of Input During Web Page Generation
A vulnerability in jupyter/nbconvert versions = 7.17.0 allows for Cross-site Scripting XSS via unsanitized text/vnd.mermaid output in HTML exports. The datamermaid block in share/templates/lab/base.html.j2 renders text/vnd.mermaid cell output directly into HTML without escaping, enabling attacker...