7205 matches found
MAL-2026-10550 Malicious code in better-tailwindcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302c3b7766a431cefe81d41434fd4c5aae74aacec230488bd004eca18cbe8dff The package publishes under the name of the legitimate better-tailwindcss project but its package.json declares both a runtime and dev dependency on...
MAL-2026-10136 Malicious code in transform-es2015-sticky-regex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eadf76ef8e123f9ce50c2910c71912996a3d079a91076ffed8d29830a1687ae1 package.json declares both a dependency and a devDependency on 'transform-es2015-sticky-regex' pointing at...
security-research
security-research Personal CVE PoC repository — exploit scrip...
exploitarium
https://discord.gg/WytKH65ZR join up for research, help, documen...
PYSEC-2026-1581 Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Service
Summary The download service downloadservice.py makes HTTP requests using raw requests.get without utilizing the application's SSRF protection saferequests.py. This can allow attackers to access internal services and attempt to reach cloud provider metadata endpoints AWS/GCP/Azure, as well as...
MAL-2026-7208 Malicious code in apple-mycelium-internal-research (npm)
--- -= Per source details. Do not edit below this line.=-...
PYSEC-2026-1516 Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
A Server-Side Request Forgery SSRF vulnerability exists in the Web Research Retriever component in langchain-community langchain-community.retrievers.webresearch.WebResearchRetriever. The vulnerability arises because the Web Research Retriever does not restrict requests to remote internet...
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign. The activity involves the exploitation of now-patched, critical security flaws in...
Exploit for CVE-2026-53359
cve-id ⚡ Simple Usage Use this project only in safe and...
PT-2026-55983
The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form 7 Form Field in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers ...
Exploit for Improper Input Validation in Apache Activemq
Apache ActiveMQ Classic — RCE Research Private research archi...
bak-exploitarium
https://discord.gg/WytKH65ZR join up for research, help, documen...
Exploit for Improper Authentication in Oracle E-Business_Suite
cve-id ⚡ Simple Usage Use this project only in safe and...
exploitarium
If you wish to collaborate/discuss with me, contact me on discor...
0-day-PoC-Repo
If you wish to collaborate/discuss with me, contact me on discor...
exploitarium-fork
If you wish to collaborate/discuss with me, contact me on discor...
exploitarium
If you wish to collaborate/discuss with me, contact me on discor...
Exploit for CVE-2026-43503
DirtyClone DirtyClone is a C-based local privilege escalation...
OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards
OpenAI on Friday released three versions of GPT-5.6 , called Sol, Terra, and Luna , as a limited preview to a small number of companies as part of an ongoing engagement with the U.S. government. While Sol is the latest flagship model and the most powerful, Terra strikes a balance between efficien...