7513 matches found
Exploit for CVE-2024-9014
CVE-2024-9014 - pgAdmin 4 OAuth2 Authentication Bypass Exploit...
Approach to mainframe penetration testing on z/OS. Deep dive into RACF
In our previous article we dissected penetration testing techniques for IBM z/OS mainframes protected by the Resource Access Control Facility RACF security package. In this second part of our research, we delve deeper into RACF by examining its decision-making logic, database structure, and the...
Malicious code in mark-testing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d23383a480fcca63e03f17e636f2b8b0ac1605237d730c7ccf159e9ea082f39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks
CPUs provide isolation mechanisms like virtualization and privilege levels to protect software. Yet these focus on architectural isolation while typically overlooking microarchitectural side channels, exemplified by Meltdown and Foreshadow. Software must therefore supplement architectural defense...
PT-2025-30867
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 Description The Linux kernel contains a flaw in the io uring/msg ring subsystem related to the freeing of io kiocb requests. Specifically, the freeing of requests was not...
WordPress A/B Testing for WordPress plugin cross-site scripting vulnerability
WordPress A/B Testing for WordPress plugin is a plugin for A/B testing in WordPress websites, which is mainly used to help optimize website conversions by comparing the effects of different page elements such as titles, button colors, content, etc.. The WordPress A/B Testing for WordPress plugin...
Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller
CitrixBleed-2-CVE-2025-5777 checker checker.py httphttps...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
CVE-2025-32463 – Privilege Escalation via Sudo chroot 📝 Ov...
OSCP-Prep
This is a comprehensive guide for information security infosec professionals, particularly those preparing for the OSCP Offensive Security Certified Professional exam. The guide is a collection of various files, including a PDF document, a text file, and a set of cheat sheets. The PDF document,...
sas-top-10
This is an educational guide for organizations adopting serverless architectures. The document, curated by top industry practitioners and security researchers, provides information on the top 10 security risks for serverless applications. The guide aims to assist organizations in building robust,...
Exploit for Code Injection in Crushftp
CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This r...
Exploit for Path Traversal in Lakernote Easyadmin
CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This r...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
CVE-2025-32463 — sudo -R Privilege Escalation Exploit illdeed...
RVISmith: Fuzzing Compilers for RVV Intrinsics
Modern processors are equipped with single instruction multiple data SIMD instructions for fine-grained data parallelism. Compiler auto-vectorization techniques that target SIMD instructions face performance limitations due to insufficient information available at compile time, requiring...
Evaluating the Evaluators: Trust in Adversarial Robustness Tests
Despite significant progress in designing powerful adversarial evasion attacks for robustness verification, the evaluation of these methods often remains inconsistent and unreliable. Many assessments rely on mismatched models, unverified implementations, and uneven computational budgets, which ca...
Exploit for Injection in Cisco Identity_Services_Engine
CVE-2025-20281 - Cisco ISE RCE Vulnerability Checker This scr...
Fedora 42 : thunderbird (2025-013f8d6631)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-013f8d6631 advisory. Update to 128.9.2 https://www.thunderbird.net/en-US/thunderbird/128.9.0esr/releasenotes/...
Fedora 42 : thunderbird (2025-a52491bdd9)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a52491bdd9 advisory. Update to 128.11.0 https://www.thunderbird.net/en-US/thunderbird/128.11.0esr/releasenotes/...