GO-2026-6574 Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei

Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei...

CVE-2026-82357

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

CVE-2018-14847

🐞 MikroTik CVE-2018-14847 Unauthenticated path traversal in MikroTik's Winbox protocol leaking admin credentials from /flash/rw/store/user.dat 📑 Table of Contents Overview Affected Versions Vulnerability 📂 Winbox Protocol Path Traversal Password Decryption Developer Backdoor Exploit References 📋...

CVE-2026-82357 RT-Labs AB C-Open CANopen NULL pointer dereference

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

CVE-2026-82357

The RT-Labs AB C-Open CANopen software contains a NULL pointer dereference vulnerability occurring when the LSS protocol is utilized to configure the device. The root cause is triggered if a user-defined application object lacks all required subindexes for object 0x1018 . An unauthenticated, remo...

CVE-2026-82357 RT-Labs AB C-Open CANopen NULL pointer dereference

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

EUVD-2026-91022

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

CVE_2023_44487-Rapid_Reset

CVE-2023-44487 HTTP/2 Rapid Reset Инструмент для тестирования - Расширенная версия Комплексный инструмент для тестирования на Python для CVE-2023-44487 , уязвимости HTTP/2 Rapid Reset. Эта расширенная версия обеспечивает детальный контроль над параметрами тестирования, множественные паттерны атак...

CVE-2026-39363

CVE-2026-39363 — Произвольное чтение файлов через WebSocket Vite Dev Server массовое сканирование Отказ от ответственности: Этот инструмент предназначен только для авторизованного тестирования безопасности и образовательных исследований. Пользователь обязан соблюдать местные законы и нормативные...

libtaxii

libtaxii A Python library for handling Trusted Automated eXchange of Indicator Information TAXII™ v1.x Messages and invoking TAXII Services. :Source: https://github.com/TAXIIProject/libtaxii/ :Documentation: https://libtaxii.readthedocs.io/ :Information: https://taxiiproject.github.io/ :Download:...

react2shell

Description: CVE-2025-55182 is a critical unauthenticated remote code execution RCE vulnerability in the react-server package used by React Server Components RSC. CVE-2025-66478 is the corresponding RCE vulnerability in Next.js, which inherits the same underlying flaw through its implementation o...

CVE-2026-24061

Docker Telnet Auto-Login Lab Лёгкая Docker-лаборатория для экспериментов с согласованием протокола Telnet , описанным в эксплойте CVE-2026-24061, который содержит автоматическую инъекцию имени пользователя с использованием опции NEW-ENVIRON. Этот проект создаёт изолированную среду «клиент–сервер»...

CVE-2026-20841

CVE-2026-20841 Этот контент соответствует части того, что предоставляется через Ежемесячный отчёт для подписчиков PatchPoint. Обзор Microsoft раскрыла исправление для уязвимости RCE в Блокноте в феврале 2026 года. Уязвимость представляет собой уязвимость внедрения команд, которая возникает в...

bleeding-heart

Heartbleed The Heartbleed bug CVE-2014-0160 is a severe implementation flaw in the OpenSSL library, which enables attackers to steal data from the memory of the victim server. The contents of the stolen data depend on what is there in the memory of the server. It could potentially contain private...

REACT-CVE-2025-55182-Lab

React-2025 CTF Lab: CVE-2025-55182 Overview This repository contains a Capture The Flag CTF lab designed strictly for educational use and security research. The environment features a vulnerable Next.js 16 e-commerce mock storefront "Quantum Supplies" specifically built to demonstrate and practic...

CVE-2026-23869-Exploit

⚡ CVE-2026-23869 — React2DoS Unauthenticated Remote Denial-of-Service via React Flight Protocol Quadratic CPU Exhaustion in Server Components Map Deserialization Overview • How It Works • Tools • Install • Usage • Nuclei • Fix • Disclaimer Vulnerability Overview Field| Detail ---|--- CVE ID|...

CVE-2026-20841

CVE-2026-20841 - Windows Notepad RCE PoC for a remote code execution flaw in Windows Notepad's markdown renderer. The markdown engine does not restrict URL protocols, allowing arbitrary protocol handlers to be triggered via clickable links. Disclaimers 1. Not my discovery. Credit goes to the...

CVE-2026-41177-Squidex-CMS

CVE-2026-41177: Слепой SSRF в Squidex CMS Техническое исследование и анализ CVE-2026-41177: уязвимость слепого межсерверного подделывания запросов Blind Server-Side Request Forgery, SSRF в API восстановления Squidex CMS. Обзор уязвимости Идентификатор CVE: CVE-2026-41177 Затронутый компонент: API...

CVE-2026-20841

CVE-2026-20841 - Windows Notepad RCE PoC for a remote code execution flaw in Windows Notepad's markdown renderer. The markdown engine does not restrict URL protocols, allowing arbitrary protocol handlers to be triggered via clickable links. Disclaimers 1. Not my discovery. Credit goes to the...

React2Shell-PoC-CVE-2025-55182

React2Shell Exploitation Simulation CVE-2025-55182 Note: This document is for educational and security research purposes only. Do not use it to attack systems without authorization. 1. Overview CVE-2025-55182, also known as React2Shell, is a critical Remote Code Execution RCE vulnerability...