CVE-2025-12571

CVE-2025-12571 affects GitLab CE/EE, with unauthenticated users able to trigger a Denial of Service by sending specially crafted JSON payloads. Affected are versions 17.10 up to, but not including, 18.4.5; 18.5 up to, but not including, 18.5.3; and 18.6 up to, but not including, 18.6.1. GitLab re...

CVE-2025-65237

A reflected cross-site scripted XSS vulnerability in OpenCode Systems USSD Gateway OC Release: 5 allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload...

web-app-vulnerability-scanner

web-app-vulnerability-scanner A Python-based Web Application V...

Exploit for Code Injection in Pgadmin Pgadmin_4

CVE-2025-2945 – pgAdmin4 Authenticated RCE PoC This reposit...

XSS_Vulnerability_scanner

XSSVulnerabilityscanner Features: - Tests multiple XSS...

Exploit for CVE-2024-32019

CVE-2024-32019 Proof of Concept Python A Python implementat...

CVE-2025-65237

OpenCode Systems USSD Gateway OC Release 5 is affected by a reflected XSS vulnerability that lets an attacker inject arbitrary JavaScript into a user’s browser by sending a crafted payload. The issue is documented across multiple sources (e.g., Red Hat CVE entry and NVD) with a CVSSv3.1 base scor...

📄 Apache Tomcat 11.0.3 Remote Session Injection

A vulnerability in Apache Tomcat version 11.0.3 allows attackers to upload a .session file containing a malicious Java serialized payload and then trigger it through a forged JSESSIONID cookie...

IGEL OS Persistent Payload

This Metasploit module provides persistence for IGEL OS Workspace Edition for a specified payload. It writes a payload to disk or base64-encodes it and executes from the registry...

CVE-2025-65015

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In versions from 1.3.3 to before 1.3.5 and from 1.4.0 to before 1.4.2, the ExceededSizeError exception messages are embedded with non-decoded JWT token parts and may cause...

Linux Chmod

Runs chmod on the specified file with specified mode. Module Options msf use payload/linux/riscv64le/chmod msf payloadchmod show actions ...actions... msf payloadchmod set ACTION msf payloadchmod show options ...show and set options... msf payloadchmod run This module requires Metasploit:...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Output code field in the module management component. An attacker can execute arbitrary web scripts or HTML in the context of another user by injecting malicious payloads that are triggered when a user...

kernel: ip6mr: Fix skb_under_panic in ip6mr_cache_report()

A buffer underwrite vulnerability exists in the linux kernel in the function skbunderpanic in ip6mrcachereport, leading to an attacker, via crafting a payload, could result in damage to system availability and integrity...

kernel: ip6mr: Fix skb_under_panic in ip6mr_cache_report()

A buffer underwrite vulnerability exists in the linux kernel in the function skbunderpanic in ip6mrcachereport, leading to an attacker, via crafting a payload, could result in damage to system availability and integrity...

webVuln-scanner

WebVuln Scanner An advanced web vulnerability scanner with cu...

CVE-2025-13502

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash DoS via a crafted payload to the GLib remote inspector server...

DEBIAN-CVE-2025-13502

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash DoS via a crafted payload to the GLib remote inspector server...

CVE-2025-13502

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash DoS via a crafted payload to the GLib remote inspector server...

MAL-2025-191247 Malicious code in @mizzle-dev/orm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd528c11fe54881e4913d51e5acc448562c3fc1b7edaae7aa2a40e6b12425f55 The package @mizzle-dev/orm was found to contain malicious code. Source: ghsa-malware c327219099fb121baf202032e61fc1b4881236e892dea9b4aa2b6159f953696...

Malicious code in @huntersofbook/form-naiveui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdec58532c2efc0e228886d82b5dd62cd0699f654168e5c792e524b3a2d73747 The package @huntersofbook/form-naiveui was found to contain malicious code. Source: google-open-source-security...