CVE-2026-9268

GitLab EE is affected by an Incorrect Authorization vulnerability (CWE-863) in versions 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2. Due to insufficient access control checks , an authenticated user with limited permissions could, under certain conditions, modify project CI/CD ...

CVE-2026-81839

GitLab EE is affected by an incorrect authorization vulnerability (CWE-863) in its scheduled pipeline execution policy. The root cause is the improper cleanup of scheduled pipeline execution policy records, which could allow an authenticated user to execute arbitrary CI/CD pipelines in a transfer...

CVE-2026-82632

GitLab CE/EE versions 18.9 before 19.2.8 , 19.3 before 19.3.5 , and 19.4 before 19.4.2 are affected by an incorrect authorization flaw. An authenticated user possessing a fine-grained Personal Access Token scoped only to user-boundary import permissions could, under certain conditions, import pro...

CVE-2023-45827

CVE-2023-45827 취약점 개요 CVE-2023-45827 CVSS : 9.8 Nov 3, 2023 ProtoType Pollution in node.js package rebob 프로젝트의 일환 취약점 설명 github advisories This is a Prototype PollutionPP vulnerability in dot-diver. It can leads to RCE. vulnerable code...

IntelOwl

!intelowlp...

VulnReach

VulnReach Runtime-aware SCA — proves which CVEs are actually reachable, not just installed. VulnReach is now an officialOWASP Project. 🎉 Demo Step 1 — SCA surfaces 74 CVEs across dependencies Step 2 — VulnReach proves which ones are actually reachable Findings — evidence chain per CVE Dashboard —...

CVE-2026-11405

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

cookie_crimes

Chrome Cookie Extraction Without Root This will print out a user's Chrome cookies. You don't need to have their password or be root to use it. nice nice nice nice nice. If you are not the kind of person who regularly gets the ability to execute code on other people's computers, you probably don't...

PyCk

PyCk For complete details please take a look at the wiki. Installation git clone https://github.com/Naategh/PyCk.git cd PyCk pip3 install -r requirements.txt Install via docker git clone https://github.com/Naategh/PyCK.git docker build . Requirements Python 3.5 Roadmap This is an educational...

CVE-2025-46178

CVE-2025-46178 Cross-Site Scripting XSS vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project. This allows remote attackers to inject arbitrary JavaScript in the context of a victim s browser session by sending a crafted URL, leading to session hijacking or...

EUVD-2026-98034

Frappe ERPNext before 15.111.0 and 16.x before 16.22.0 contains a missing authorization vulnerability in certain project-related endpoints that fail to enforce permission checks. Authenticated low-privileged users can call these endpoints directly to read project data beyond what their assigned...

CVE-2026-8037

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

CVE-2025-28346

Vulnerability Type SQL Injection Description A Time-Based Blind SQL Injection vulnerability was discovered in Ticket-Booking-App - 1.0 that allows an attacker to execute arbitrary SQL queries on the underlying database. The vulnerable parameter does not properly sanitize user-supplied input,...

log4j-vulnerability

LOG4J Vulnerability A Java-based project presenting how to exploit CVE-2021-44228 vulnerability. https://user-images.githubusercontent.com/13152452/147803050-458593e9-4b54-4e1f-ba07-802866b9b43e.mp4 Requirements A Linux-based operating system: I used Ubuntu Desktop 20.10 64 bits OpenJDK 17.0.1: T...

HydraDragonAV-Mobile

🐉 HydraDragonAV Mobile Advanced Android Antivirus With Threat Protection ⚠️ Project on hold. This project did not get enough interest, so I have paused it for a while. Development has moved to HydraDragonAntivirus. Discord Community Server: https://discord.gg/7XMCuj5mbP Logo made by discord user...

Anthropic-Credited-CVEs

ANTHROPIC CVE TRACKER Overview Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by Project Glasswing. CURRENT CVE COUNT: 303 Fixed Anthropic Findings w/o CVE: 128 Findings Withdrawn by Anthropic: 243 Distributions | ---|--- Anthropic Research Tracking...

CVE-2018-7691

CVE-2018-7691 The SSC REST API contains Insecure Direct Object Reference IDOR vulnerabilities that allow authenticated users access to arbitrary details of the Local and LDAP users via POST method and to arbitrary details of other user's Fortify projects via GET method. Exploit-DB publication at...

CVE-2024-4367_test

This project is used to test CVE-2024-4367, POC access address: https://j1nksc.github.io/CVE-2024-4367test/poc.pdf...

next-cve-2025-66478

NextJS CVE-2025-66478 Scans all projects vulnerable to CVE-2025-66478 projects in the current working directory and reports them. Learn more about CVE-2025-66478 Warning This script doesn't fix any vulnerabilities. This is just for locating them. Please refer to this article to learn more about t...

CVE-2026-9811

CVE-2026-9811 CVE-2026-9811 is a Stored Cross-Site Scripting Stored XSS vulnerability affecting Mautic 7 versions 7.0.0 through 7.1.1.The vulnerability exists in the Project Selector component, where project names returned via an AJAX request are inserted into the page without proper output...