6501 matches found
vulnerability-assessment-metasploitable2
Vulnerability Assessment ā Metasploitable 2 A end-to-end vuln...
cybersec-cheat-sheets
š”ļø Cybersecurity & Pentesting Cheat Sheets A collection of cl...
MAL-2026-6273 Malicious code in zod-pino (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c536e5a7ee3d5542e1ac822b30ba4525e52b2ae0c964d0c2470468d91b9b41c8 The package is published under a name suggesting a Pino logger integration for Zod, but the tarball contents do not match that purpose and exhibit...
RIFT-Bench: Dynamic Red-Teaming for Agentic AI Systems
Agentic AI systems powered by large language models LLMs are rapidly evolving into autonomous decision-making systems, exposing attack vectors beyond those of traditional LLM vulnerabilities. Existing security evaluations are often tied to specific implementations or domains, limiting unified...
VS Code Extension Security Scanner
A local security auditing tool that scans installed VS Code, VS Code Insiders, VS Code Server, VS Code OSS, and Cursor extensions for potentially suspicious behaviors. The script enumerates extension directories, parses extension metadata, and flags extensions that automatically execute on startu...
sentinelx
sentinelx SentinelX AI ā Next-gen AI-powered cybersecurit...
š Microsoft Windows Kernel ISO Mount / Oplock Deserialization Denial of Service
Proof of concept exploit for a logic-based denial of service vulnerability in Windows 11 25H2 Build 26200 that causes permanent kernel state corruption through ISO mounting, oplocks, and Windows Defender scanning...
@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +694 more potentially affected by CVE-2026-12151 via undici (>=7.0.0, <=7.27.2)
undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.26.4, =0.0.33, =0.0.1, =1.0.0, =21.0.0-rc.2, =21.0.0-rc.2, =0.5.0, =0.5.1 - @anyauth/shared-deps 0.1.0 and more Source cves: CVE-2026-12151 Source advisory: SNYK:JS-UNDICI-17372754...
EUVD-2025-210271
picklescan before 0.0.27 contains a parsing logic error in the listglobals function when handling STACKGLOBAL opcodes, failing to track arguments in the correct range and allowing malicious pickle files to bypass detection. Attackers can craft pickle files with arguments at position zero to trigg...
CVE-2026-53875: Improper Neutralization of Directives in Dynamically Evaluated Code
picklescan before 1.0.3 contains a scanning bypass vulnerability in the scanpytorch function that allows attackers to embed malicious magic numbers via dynamic eval using the reduce trick. Attackers can craft malicious PyTorch payloads that evade picklescan detection while remaining executable,...
Project Firefly III has incorrect access control in the webhook management component
Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...
GHSA-P85R-X2WJ-MXQJ shlink has a Server-Side Request Forgery issue
A Server-Side Request Forgery SSRF in the automatic short URL title resolution component of shlink v5.0.1 allows attackers to scan internal resources via supplying a crafted longUrl...
GHSA-9MMG-Q95P-GP67 Project Firefly III has incorrect access control in the webhook management component
Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...
shlink has a Server-Side Request Forgery issue
A Server-Side Request Forgery SSRF in the automatic short URL title resolution component of shlink v5.0.1 allows attackers to scan internal resources via supplying a crafted longUrl...
Koillection has an authenticated Server-Side Request Forgery issue
An authenticated Server-Side Request Forgery SSRF in the custom scraper subsystem component of Benjamin Jonard Koillection v1.8.0 allows attackers to scan internal resources via supplying a crafted URL...
VulnAnalyzer
š VulnAnalyzer 2.1 A comprehensive automated vulnerability...
exploit-scripts
Offensive Security Toolkit āāāāāāāāāāāāāāāāāāāāāāāāāāāāāā...
PT-2026-49329
Name of the Vulnerable Software and Affected Versions Benjamin Jonard Koillection version 1.8.0 Description An authenticated Server-Side Request Forgery SSRF exists in the custom scraper subsystem component. This allows attackers to scan internal resources by supplying a crafted URL. SSRF is a fl...
CVE-2026-50888
Benjamin Jonard Koillection v1.8.0 is vulnerable to an authenticated Server-Side Request Forgery (SSRF) within the custom scraper subsystem component. This flaw allows an authenticated attacker to supply a crafted URL, enabling them to scan internal network resources by tricking the server into m...
CVE-2026-50888
An authenticated Server-Side Request Forgery SSRF in the custom scraper subsystem component of Benjamin Jonard Koillection v1.8.0 allows attackers to scan internal resources via supplying a crafted URL...