11019 matches found
ysoserial.net
A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discovered in common .NET libraries that can, under the right conditions, exploit .NET...
catsploit
CATSploit🐈 CATSploit is an automated penetration testing tool using Cyber Attack Techniques Scoring CATS method that can be used without pentester. Currently, pentesters implicitly made the selection of suitable attack techniques for target systems to be attacked. CATSploit uses system...
Formidable Forms < 2.05.02 - Cross-Site Scripting
Formidable Form Builder for WordPress versions before 2.05.03 contains a stored cross-site scripting caused by insufficient input sanitization and output escaping in form parameters like 'afterhtml', letting unauthenticated attackers inject and execute arbitrary scripts in victims' browsers id:...
Astra Linux – Vulnerability in Ruby-Rack
There is a possible denial-of-service vulnerability in Rack versions 2.0.9.1, 2.1.4.1, and 2.2.3.1, specifically in the multipart parsing component of Rack...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...
CVE-2024-21111
These binaries were built from source using mansk1es code. https://github.com/mansk1es/CVE-2024-21111 Prebuilt binaries for Privilege Escalation in Oracle VM Virtual box prior to 7.0.16...
CVE-2018-16858-Python
CVE-2018-16858-Python Python implementation of CVE-2018-16858 Based on work from here and here...
snyk-js-jquery-565129
This repository contains the patches for CVE-2020-11022 and CVE-2020-11023 which affect all jQuery versions prior 3.5.0, including the patches from DanielRuf/snyk-js-jquery-174006. These patches were generated with diff -u original patched patchfile. Apply the patches You can apply the patches wi...
CVE-2025-11371
免责声明 本项目仅用于教育和研究目的 。 未经明确事先同意 而使用本软件攻击目标属于违法行为 。 作者对因使用本代码而产生的任何滥用、损害或法律后果概不负责 。 请始终遵循负责任披露实践 ，并且仅在您拥有或获得许可使用的受控环境 中进行测试。...
CVE-2026-87604
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 al...
CVE-2026-87516
Observable discrepancy in Navigation in Google Chrome prior to 153.0.8...
CVE-2026-87614
Incorrect authorization in ServiceWorker in Google Chrome prior to 153...
CVE-2026-87464
Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowe...
CVE-2026-87567
UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0...
CVE-2026-87584
Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010...
CVE-2026-87598
Incorrect authorization in ServiceWorker in Google Chrome prior to 153...
CVE-2026-87617
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 all...
CVE-2026-87570
Incorrect authorization in SiteIsolation in Google Chrome prior to 153...