61 matches found
Exploit for CVE-2026-17583
cve-id Donate Support the maintenance of this project wit...
Exploit for Use After Free in Linux Linux_Kernel
cve-id Donate Support the maintenance of this project wit...
vulnerabilities found in Apple MacOS
Apple has addressed several vulnerabilities in MacOS, specifically in the versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.x. These vulnerabilities involve various security issues in macOS, including insufficient sandbox restrictions, which may allow applications to gain unauthorized access t...
Exploit for Improper Authorization in Microsoft
cve-id Donate Support the maintenance of this project wit...
Exploit for CVE-2026-16723
cve-id Donate Support the maintenance of this project wit...
Exploit for CVE-2026-46331
cve-id ⚡ Simple Usage Use this project only in safe and...
Exploit for CVE-2026-8461
cve-id ⚡ Simple Usage Use this project only in safe and...
Exploit for CVE-2026-42055
cve-id ⚡ Simple Usage Use this project only in safe and...
Exploit for CVE-2026-48907
CVE-2026-48907 TODO - Init own cve ⚡ Simple Usage U...
Exploit for OS Command Injection in Fortinet Fortisandbox
cve-id ⚡ Simple Usage Use this project only in safe and...
GHSA-9C38-2MCM-Q7F7 n8n: Merge Node SQL Mode Prototype Pollution
Impact An authenticated user with permission to create or modify workflows could pollute the sandbox used by the Merge node's SQL Query mode. Because the sandbox context was cached and reused across all workflow executions on the instance, prototype mutations introduced by one user's workflow...
Exploit for CVE-2026-20262
cve-id ⚡ Simple Usage Use this project only in safe and...
CVE-2026-11646
Use after free in ViewTransitions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-47161 RELATE Vulnerable to Remote Code Execution (RCE) via Insecure Celery Pickle Deserialization
RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and deserialize untrusted 'pickle' data. An attacker who can reach the message broker can execute arbitrary commands on the host server. Combined...
Google Chrome 安全漏洞
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a security vulnerability caused by V8 integer overflow. This vulnerability could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML...
CVE-2026-42782
Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted code reaching a non-sandboxed execution path via the class static initializer. This issue affects...
Dify: When Your AI Platform Becomes the Attack Surface
Executive Summary We identified a couple of vulnerabilities in AI automation platform Dify resulting in cross-tenant sensitive information disclosure and one-click account takeover. These findings reinforce the pattern we documented in our previous n8n blogpost: even though AI automation platform...
EUVD-2026-30446
Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...