5125 matches found
vulnerability-assessment-metasploitable2
Vulnerability Assessment — Metasploitable 2 A end-to-end vuln...
Apache Superset Flask Debugger Exposure Leading to Remote Code Execution (CTAS SQL Injection to Unlock Werkzeug PIN)
CV26: Flask Debugger Exposure Leading to Remote Code Execution Vulnerability Overview | Item | Details | |------|------| | Type | Remote Code Execution RCE | | Severity | Critical when conditions are met / Medium standalone | | Affected Versions | = 6.0.1 | | Who can do what with what impact |...
lab-keamanan-siber
Lab Keamanan Siber Web Security Testing Lab 🚀 Cara Menja...
agent-lab-sdk (>=0.1.7, <=0.1.16), gpt-playground (0.1.1) +1 more potentially affected by CVE-2026-55443 via langchain (0.0.27)
langchain PYPI version 0.0.27 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - agent-lab-sdk =0.1.7, =0.0.14, =0.0.15 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...
Exploit for Code Injection in Microsoft
CVE-2026-26030 — Semantic Kernel filter eval RCE lab A...
docker-vuln-lab-builder
bash python scripts-exportcontainer.py \ --image-path rockm...
windows7-eternalblue-exploit-lab
EternalBlue MS17-010 Exploitation Lab — Windows 7 A hands-o...
Exploit for CVE-2026-4020
cve-id ⚡ Simple Usage Use this project only in safe and...
jaeger-lab-to-nwb (0.1.1), xircuits (1.3.0) potentially affected by CVE-2026-67338 via jupyterlab (3.3.2)
jupyterlab PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - jaeger-lab-to-nwb 0.1.1 - xircuits 1.3.0 Source cves: CVE-2026-67338 Source advisory: OSV:GHSA-VMHF-C436-HXJ4...
Exploit for CVE-2026-42530
cve-id ⚡ Simple Usage Use this project only in safe and...
EUVD-2026-37607
Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...
Malicious code in lab-services (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4acaa72e3c14b79785540c878cb48f7a0cdc238d20ac9cebd6ffdd42061f6e7b On npm install, the package's preinstall lifecycle script node.js collects host identifiers from the installing machine — hostname, public IP resolve...
CVE-2026-53805 NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API
NVIDIA Spatial Intelligence Lab's SIL GEN3C contains an unauthenticated remote code execution vulnerability in the inference API server where the /request-inference and /seed-model endpoints deserialize raw HTTP request bodies using Python's pickle.loads without authentication or input validation...
CVE-2026-42380
Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...
Exploit for CVE-2026-49060
CVE-2026-49060 - Hippoo Mobile App for WooCommerce Incorrect P...
CVE-2026-42380 WordPress AI Lab theme < 5.4.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...
CVE-2026-42380 WordPress AI Lab theme < 5.4.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...
CVE-2026-42380
CVE-2026-42380 covers the WordPress AI Lab theme prior to version 5.4.2, which is vulnerable to unauthenticated PHP Object Injection. The Patchstack entry and CVE records indicate the vulnerability is fixed in 5.4.2. Impact is high (remote, unauthenticated) per the CVSS vector: Network, None priv...